Skip to content
This repository

A utility for emulating root privileges

Fetching latest commit…

Cannot retrieve the latest commit at this time

doc Implement PSEUDO_UNLOAD, replacing existing PSEUDO_RELOADED semantics.
enums Major shift: All the id_t types have been reworked so that they
guts Merge in ports work
table_templates Major shift: All the id_t types have been reworked so that they
templates Fix realpath(name, NULL) when PSEUDO_DISABLED=1
test Implement PSEUDO_UNLOAD, replacing existing PSEUDO_RELOADED semantics.
.gitignore Merge in ports work
COPYING initial public release
Futures.txt Add "Futures.txt" for notes about planned work.
makedata.c Add performance test (rough draft).
maketables Merge in ports work
offsets.c While looking at a possible 64/32-bit clash (there wasn't one after
perftest Add performance test (rough draft).
pseudo.1 Rework the clone wrapper to add an intermediate function to resolve a…
pseudo.c Implement PSEUDO_UNLOAD, replacing existing PSEUDO_RELOADED semantics.
pseudo_db.c Merge in ports work
pseudo_db.h Major shift: All the id_t types have been reworked so that they
pseudo_server.c Try to force debug fd to 2. The intent is that this will keep malloc
pseudo_server.h Updates/improvements for logging
pseudodb.c Updates: Enable additional warnings, fix a number of things.
pseudolog.1 Updates/improvements for logging
pseudolog.c A couple more int/size_t mismatch fixes. Enable execl, execle, execlp, execv, and execvp wrappers Whitespace changes.
pseudo -- an analogue to sudo


The pseudo utility offers a way to run commands in a virtualized "root"
environment, allowing ordinary users to run commands which give the illusion
of creating device nodes, changing file ownership, and otherwise doing
things necessary for creating distribution packages or filesystems.

To configure, run the provided configure script.  Note that this is
NOT an autoconf script.

Configure options:

There is no default prefix.  The default for sqlite is /usr, and for
bits is 32.  You need a reasonably modern sqlite3 -- it has to have
sqlite3_clear_bindings(), which at least one default sqlite3 install
did not.  (But that was dated 2006, so I'm not sure this will affect
most readers.)

The suffix value can be used to append a particular text string to file
names (such as libpseudo<suffix>.so).  This was used in the WR environment
to create libpseudo-<host_libc_md5sum>.so, to ensure that libpseudo was
rebuilt if the host libc changed.

This code is not particularly portable, but works on Linux and also
on 64-bit Intel Darwin systems.

Limited user documentation is provided in the given man page files (these
are not currently installed, merely provided in the source directory), and
some documentation on internals is provided in the doc/ directory.


* The chroot() functionality is incomplete, though now sufficient for
  the real-world use cases we've tried.
* I have no intention of converting to autoconf.  It is the wrong tool
  for the job.

Please feel free to send bug feedback, change requests, or general


My various coworkers, both engineering and management, made this possible.
While I did most of the actual typing, this code has benefitted greatly
from detailed code reviews, excellent reproducers for bugs, and the
consistent support of the whole group for the project.  It's been a great
deal of fun, and I'm pretty happy that we're finally ready to make it
available for other people to look at.

Something went wrong with that request. Please try again.