| Port details |
- py-privleap Limited Privilege Escalation Framework
- 5.7.1_1 security
=0 Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one. - Maintainer: dtxdf@FreeBSD.org
 - Port Added: 2026-05-25 17:51:14
- Last Update: 2026-05-25 22:58:27
- Commit Hash: d364dde
- Also Listed In: python
- License: AGPLv3
- WWW:
- https://www.kicksecure.com/wiki/Privleap
- Description:
- privleap is a privilege escalation framework similar in purpose to
sudo and doas, but very different conceptually. It is designed to
allow user-level applications to run very specific operations as
root without allowing full root control of the machine. Unlike
directly executable privilege escalation frameworks like sudo,
privleap runs as a background service that listens for signals from
other applications. Each signal can request a particular, pre-configured
action to be taken. Signals are authenticated, and each action is
taken only if the signal passes authentication. Any console output
from the action is then returned to the caller. This system allows
privleap to function without being SUID-root, and avoids a lot of
the potential pitfalls of sudo, doas, run0, etc.
¦ ¦ ¦ ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- ${PYTHON_PKGNAMEPREFIX}privleap>0:security/py-privleap@${PY_FLAVOR}
- To install the port:
- cd /usr/ports/security/py-privleap/ && make install clean
- To add the package, run one of these commands:
- pkg install security/py-privleap
- pkg install py313-privleap
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above. NOTE: This is a Python port. Instead of py313-privleap listed in the above command, you can pick from the names under the Packages section.- PKGNAME: py313-privleap
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1779647261
SHA256 (Kicksecure-privleap-5.7-1_GH0.tar.gz) = 6ee88c2fbe1e868691ff5634994cf22d613e91abe8eba5b82083d875ac54afb5
SIZE (Kicksecure-privleap-5.7-1_GH0.tar.gz) = 120717
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- python3.13 : lang/python313
- Test dependencies:
-
- python3.13 : lang/python313
- Runtime dependencies:
-
- py313-PAM>=0 : security/py-PAM@py313
- python3.13 : lang/python313
- There are no ports dependent upon this port
Configuration Options:
- No options to configure
- Options name:
- security_py-privleap
- USES:
- python:3.13+ shebangfix
- pkg-message:
- For install:
- pam_exec(8) could be used to call leapctl(8) to create the
communication socket required by leaprun(8) by simply adding
the following to a PAM policy file:
session optional pam_exec.so /usr/local/libexec/privleap/pam_create_socket.sh
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
5.7.1_1 25 May 2026 22:58:27
    |
Jesús Daniel Colmenares Oviedo (dtxdf)  |
security/py-privleap: Implement reload command in rc(8) script |
5.7.1 25 May 2026 17:47:38
    |
Jesús Daniel Colmenares Oviedo (dtxdf)  |
security/py-privleap: New port: Limited Privilege Escalation Framework
privleap is a privilege escalation framework similar in purpose to
sudo and doas, but very different conceptually. It is designed to
allow user-level applications to run very specific operations as
root without allowing full root control of the machine. Unlike
directly executable privilege escalation frameworks like sudo,
privleap runs as a background service that listens for signals from
other applications. Each signal can request a particular, pre-configured
action to be taken. Signals are authenticated, and each action is
taken only if the signal passes authentication. Any console output
from the action is then returned to the caller. This system allows
privleap to function without being SUID-root, and avoids a lot of
the potential pitfalls of sudo, doas, run0, etc.
WWW: https://www.kicksecure.com/wiki/Privleap |