Architecture Overview

Binaries

• dosr: policy lookup, authentication flow, and command execution uner a restricted context.
• chsr: policy editing and conversion interface.
• capable: policy discovery, available in its own repository.
• gensr: fully automated policy generation, available in its own repository

Internal crates

• rar-common: shared policy model, storage handling, migrations, utility logic.
• rar-exec: execution pipeline primitives (runner, terminal/pty, pipe, signals).

Did you know that there are two approaches for secure execution?

• The openBSD one is about calling execve() directly for minimal code implementation. Less features, more robust is the software.
• The sudo one is about adding a intermediary process in order to oversee the communication between user and privileged process.

The version 4.0 of RaR is switching from the first to second design! We believe that the risk taken by implementation error is worth the security feature to protect against innapropriate user inputs.