notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photos
All times are UTC
Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details
py-privleap Limited Privilege Escalation Framework
5.7.1_1 securitynew! on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one.
Maintainer: dtxdf@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-05-25 17:51:14
Last Update: 2026-05-25 22:58:27
Commit Hash: d364dde
Also Listed In: python
License: AGPLv3
WWW:
https://www.kicksecure.com/wiki/Privleap
Description:
privleap is a privilege escalation framework similar in purpose to sudo and doas, but very different conceptually. It is designed to allow user-level applications to run very specific operations as root without allowing full root control of the machine. Unlike directly executable privilege escalation frameworks like sudo, privleap runs as a background service that listens for signals from other applications. Each signal can request a particular, pre-configured action to be taken. Signals are authenticated, and each action is taken only if the signal passes authentication. Any console output from the action is then returned to the caller. This system allows privleap to function without being SUID-root, and avoids a lot of the potential pitfalls of sudo, doas, run0, etc.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (33 items)
Collapse this list.
  1. /usr/local/share/licenses/py313-privleap-5.7.1_1/catalog.mk
  2. /usr/local/share/licenses/py313-privleap-5.7.1_1/LICENSE
  3. /usr/local/share/licenses/py313-privleap-5.7.1_1/AGPLv3
  4. bin/leapctl
  5. bin/leaprun
  6. bin/privleapd
  7. etc/pam.d/privleapd
  8. etc/privleap/conf.d/privleap.conf
  9. lib/python3.13/site-packages/privleap/__init__.py
  10. lib/python3.13/site-packages/privleap/__pycache__/__init__.cpython-313.opt-2.pyc
  11. lib/python3.13/site-packages/privleap/__pycache__/leapctl.cpython-313.opt-2.pyc
  12. lib/python3.13/site-packages/privleap/__pycache__/leaprun.cpython-313.opt-2.pyc
  13. lib/python3.13/site-packages/privleap/__pycache__/privleap.cpython-313.opt-2.pyc
  14. lib/python3.13/site-packages/privleap/__pycache__/privleapd.cpython-313.opt-2.pyc
  15. lib/python3.13/site-packages/privleap/leapctl.py
  16. lib/python3.13/site-packages/privleap/leaprun.py
  17. lib/python3.13/site-packages/privleap/privleap.py
  18. lib/python3.13/site-packages/privleap/privleapd.py
  19. lib/python3.13/site-packages/privleap/tests/__init__.py
  20. lib/python3.13/site-packages/privleap/tests/__pycache__/__init__.cpython-313.opt-2.pyc
  21. lib/python3.13/site-packages/privleap/tests/__pycache__/run_test.cpython-313.opt-2.pyc
  22. lib/python3.13/site-packages/privleap/tests/__pycache__/run_test_util.cpython-313.opt-2.pyc
  23. lib/python3.13/site-packages/privleap/tests/run_test.py
  24. lib/python3.13/site-packages/privleap/tests/run_test_util.py
  25. libexec/privleap/shim.py
  26. libexec/privleap/pam_create_socket.sh
  27. share/man/man1/privleapd.1.gz
  28. share/man/man5/privleap.conf.d.5.gz
  29. share/man/man8/leapctl.8.gz
  30. share/man/man8/leaprun.8.gz
  31. @owner
  32. @group
  33. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • privleapd
Dependency lines:
  • ${PYTHON_PKGNAMEPREFIX}privleap>0:security/py-privleap@${PY_FLAVOR}
To install the port:
cd /usr/ports/security/py-privleap/ && make install clean
To add the package, run one of these commands:
  • pkg install security/py-privleap
  • pkg install py313-privleap
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
NOTE: This is a Python port. Instead of py313-privleap listed in the above command, you can pick from the names under the Packages section.
PKGNAME: py313-privleap
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1779647261 SHA256 (Kicksecure-privleap-5.7-1_GH0.tar.gz) = 6ee88c2fbe1e868691ff5634994cf22d613e91abe8eba5b82083d875ac54afb5 SIZE (Kicksecure-privleap-5.7-1_GH0.tar.gz) = 120717

Packages (timestamps in pop-ups are UTC):
py313-privleap
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest-----n/an/an/a
FreeBSD:13:quarterly-----n/an/an/a
FreeBSD:14:latest-5.7.1_1--5.7.1_1---
FreeBSD:14:quarterly--------
FreeBSD:15:latest-5.7.1_1n/a-n/an/a--
FreeBSD:15:quarterly--n/a-n/an/a--
FreeBSD:16:latest-5.7.1_1n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. python3.13 : lang/python313
Test dependencies:
  1. python3.13 : lang/python313
Runtime dependencies:
  1. py313-PAM>=0 : security/py-PAM@py313
  2. python3.13 : lang/python313
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_py-privleap
USES:
python:3.13+ shebangfix
pkg-message:
For install:
pam_exec(8) could be used to call leapctl(8) to create the communication socket required by leaprun(8) by simply adding the following to a PAM policy file: session optional pam_exec.so /usr/local/libexec/privleap/pam_create_socket.sh
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/Kicksecure/privleap/tar.gz/5.7-1?dummy=/
Collapse this list.

Number of commits found: 2

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
5.7.1_1
25 May 2026 22:58:27
commit hash: d364dde862e0660d2cad7aca13e5b30955815b38commit hash: d364dde862e0660d2cad7aca13e5b30955815b38commit hash: d364dde862e0660d2cad7aca13e5b30955815b38commit hash: d364dde862e0660d2cad7aca13e5b30955815b38 files touched by this commit
Jesús Daniel Colmenares Oviedo (dtxdf) search for other commits by this committer
security/py-privleap: Implement reload command in rc(8) script
5.7.1
25 May 2026 17:47:38
commit hash: 23c19ba170c5c6ce8102452cd6416a223e62c791commit hash: 23c19ba170c5c6ce8102452cd6416a223e62c791commit hash: 23c19ba170c5c6ce8102452cd6416a223e62c791commit hash: 23c19ba170c5c6ce8102452cd6416a223e62c791 files touched by this commit
Jesús Daniel Colmenares Oviedo (dtxdf) search for other commits by this committer
security/py-privleap: New port: Limited Privilege Escalation Framework

privleap is a privilege escalation framework similar in purpose to
sudo and doas, but very different conceptually. It is designed to
allow user-level applications to run very specific operations as
root without allowing full root control of the machine. Unlike
directly executable privilege escalation frameworks like sudo,
privleap runs as a background service that listens for signals from
other applications. Each signal can request a particular, pre-configured
action to be taken. Signals are authenticated, and each action is
taken only if the signal passes authentication. Any console output
from the action is then returned to the caller. This system allows
privleap to function without being SUID-root, and avoids a lot of
the potential pitfalls of sudo, doas, run0, etc.

WWW: https://www.kicksecure.com/wiki/Privleap

Number of commits found: 2