elewrap

Elewrap is a minimalistic setuid wrapper program designed for secure privilege elevation, operating similarly to sudo but with a focus on simplicity and reduced attack surface. It statically compiles auth rules, allowing the definition of which users and commands can utilize elevated permissions, and provides a NixOS module for seamless integration and deployment. Notable features include the ability to authenticate target commands via SHA512 hash and fine-grained control over allowed users, groups, and environment variables.