Optimize RootAsRole sr program

.github/workflows/tests.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: xd009642/tarpaulin:develop-nightly
-      options: --security-opt seccomp=unconfined
+      options: --security-opt seccomp=unconfined --privileged
     steps:
     - name: Checkout code
       uses: actions/checkout@v2

.vscode/launch.json

@@ -5,59 +5,14 @@
     "version": "0.2.0",
     "configurations": [
         {
-                "name": "(gdb) Test",
-                "type": "cppdbg",
-                "request": "launch",
-                "preLaunchTask": "make build_unit_test",
-                "program": "${workspaceFolder}/bin/unit_test",
-                "args": [],
-                "stopAtEntry": false,
-                "cwd": "${fileDirname}",
-                "environment": [],
-                "externalConsole": false,
-                "MIMode": "gdb",
-                "setupCommands": [
-                    {
-                        "description": "Enable pretty-printing for gdb",
-                        "text": "-enable-pretty-printing",
-                        "ignoreFailures": true
-                    },
-                    {
-                        "description": "Set Disassembly Flavor to Intel",
-                        "text": "-gdb-set disassembly-flavor intel",
-                        "ignoreFailures": true
-                    },
-                    {   "description": "The new process is debugged after a fork. The parent process runs unimpeded.",
-                        "text": "-gdb-set follow-fork-mode child",
-                        "ignoreFailures": true
-                    }
-                ]
-        },
-        {
-            "name": "(gdb) Launch",
-            "type": "cppdbg",
+            "type": "lldb",
             "request": "launch",
-            "preLaunchTask": "setcap",
-            "program": "/usr/bin/sr",
+            "name": "Launch",
+            "program": "${workspaceFolder}/target/debug/sr",
             "args": ["ls"],
-            "stopAtEntry": false,
-            "cwd": "${fileDirname}",
-            "environment": [],
-            "externalConsole": false,
-            "MIMode": "gdb",
-            "miDebuggerPath": "${workspaceFolder}/.vscode/gdb_root.sh",
-            "setupCommands": [
-                {
-                    "description": "Enable pretty-printing for gdb",
-                    "text": "-enable-pretty-printing",
-                    "ignoreFailures": true
-                },
-                {
-                    "description":  "Set Disassembly Flavor to Intel",
-                    "text": "-gdb-set disassembly-flavor intel",
-                    "ignoreFailures": true
-                }
-            ],
+            "cwd": "${workspaceFolder}"
         }
+
+
     ]
 }

.vscode/tasks.json

@@ -6,58 +6,14 @@
         }
     },
     "tasks": [
-        {
-            "type": "cppbuild",
-            "label": "C/C++: gcc build active file",
-            "command": "/usr/bin/gcc",
-            "args": [
-                "-fdiagnostics-color=always",
-                "-g",
-                "${file}",
-                "-o",
-                "${fileDirname}/${fileBasenameNoExtension}"
-            ],
-            "options": {
-                "cwd": "${fileDirname}"
-            },
-            "problemMatcher": [
-                "$gcc"
-            ],
-            "group": {
-                "kind": "build",
-                "isDefault": true
-            },
-            "detail": "Task generated by Debugger."
-        },
-        {
-            "type": "shell",
-            "label": "make",
-            "command": "sudo",
-            "args": [
-                "-E",
-                "/usr/bin/make",
-                "install"
-            ],
-            "options": {
-                "cwd": "${cwd}"
-            },
-            "problemMatcher": [
-                "$gcc"
-            ],
-            "group": {
-                "kind": "build",
-                "isDefault": true
-            },
-            "detail": "Task generated by Debugger."
-        },
+
         {
             "type": "shell",
             "label": "setcap",
-            "dependsOn": "make",
             "command": "sudo",
             "args": [
                 "/usr/bin/setcap",
-                "=eip",
+                "=p",
                 "${cwd}/bin/sr"
             ],
             "options": {
@@ -66,58 +22,6 @@
             "group": {
                 "kind": "none"
             }
-        },
-        {
-            "type": "shell",
-            "label": "make build_unit_test",
-            "command": "sudo",
-            "args": [
-                "/usr/bin/make",
-                "build_unit_test"
-            ],
-            "options": {
-                "cwd": "${workspaceFolder}",
-                "env": {
-                    "GDB_DEBUG": "1",
-                    "DEBUG": "1"
-                }
-            },
-            "problemMatcher": [
-                "$gcc"
-            ],
-            "group": {
-                "kind": "build",
-                "isDefault": true
-            },
-            "detail": "Task generated by Debugger."
-        },
-        {
-            "type": "shell",
-            "label": "debug unit_test",
-            "dependsOn": "make build_unit_test",
-            "command": "${cwd}/bin/unit_test",
-            "args": [
-                "--debug=gdb"
-            ],
-            "options": {
-                "cwd": "${cwd}"
-            },
-            "isBackground": true,
-            "problemMatcher": {
-                "pattern": [
-                    {
-                      "regexp": ".",
-                      "file": 1,
-                      "location": 2,
-                      "message": 3
-                    }
-                  ],
-                "background": {
-                    "activeOnStart": true,
-                    "beginsPattern": ".",
-                    "endsPattern": "Listening on port"
-                }
-            }
         }
 
     ],

Cargo.toml

@@ -4,7 +4,7 @@ members = ["xtask", "rar-common"]
 [package]
 name = "rootasrole"
 # The project version is managed on json file in resources/rootasrole.json
-version = "3.0.6"
+version = "3.1.0"
 rust-version = "1.76.0"
 authors = ["Eddie Billoir <[email protected]>"]
 edition = "2021"
@@ -25,9 +25,17 @@ maintainance ={ status = "actively-maintained", badge = "https://img.shields.io/
 [profile.release]
 strip = "symbols"
 lto = true
-opt-level = "s"
+opt-level = 3
 codegen-units = 1
 
+[profile.profiling]
+strip = "none"
+lto = false
+opt-level = 1
+inherits = "release"
+debug = true
+
+
 #[features]
 #cursive_lib = [ "cursive" ]
 #srlibs = [ "pam-client", "bitflags" ]
@@ -45,6 +53,7 @@ path = "src/chsr/main.rs"
 [features]
 default = ["finder"]
 finder = ["dep:pcre2", "rar-common/pcre2", "rar-common/finder"]
+pcre2 = ["dep:pcre2", "rar-common/pcre2"]
 
 [lints.rust]
 unexpected_cfgs = { level = "allow", check-cfg = ['cfg(tarpaulin_include)'] }
@@ -65,7 +74,7 @@ capctl = "0.2"
 pcre2 = { version = "0.2", optional = true }
 serde = { version = "1.0", features=["rc", "derive"] }
 serde_json = "1.0"
-ciborium = "0.2"
+cbor4ii = { version = "1.0.0", features = ["serde", "serde1", "use_std"] }
 glob = "0.3"
 pam-client2 = "0.5"
 bitflags = { version = "2.6" }
@@ -80,6 +89,8 @@ pest = "2.7"
 pest_derive = "2.7"
 const_format = "0.2"
 hex = "0.4"
+bon = "3.5.1"
+serde_json_borrow = "0.7.1"
 
 [dev-dependencies]
 log = "0.4"

README.md

@@ -16,7 +16,7 @@
 <!-- The project version is managed on json file in resources/rootasrole.json -->
 <!-- markdownlint-restore -->
 
-# RootAsRole (V3.0.6) : A memory-safe and security-oriented alternative to sudo/su commands
+# RootAsRole (V3.1.0) : A memory-safe and security-oriented alternative to sudo/su commands
 
 **RootAsRole** is a project to allow Linux/Unix administrators to delegate their administrative tasks access rights to users. Its main features are :
 

build.rs

@@ -53,7 +53,7 @@ fn set_readme_version(package_version: &str, file: &str) -> Result<(), Box<dyn E
     Ok(())
 }
 
-fn main() {    
+fn main() {
     println!("cargo:rerun-if-changed=Cargo.toml");
     println!("cargo:rerun-if-changed=build.rs");
 
@@ -77,6 +77,4 @@ fn main() {
     if let Err(err) = set_readme_version(&package_version, "README.md") {
         eprintln!("cargo:warning={}", err);
     }
-
-
 }

rar-common/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rootasrole-core"
-version = "3.0.6"
+version = "3.1.0"
 edition = "2021"
 description = "This core crate contains the RBAC and main features for the RootAsRole project."
 license = "LGPL-3.0-or-later"
@@ -27,7 +27,7 @@ log = "0.4"
 syslog = "7.0"
 env_logger = "0.11"
 bon = { version = "3.3.2", features = ["experimental-overwritable"] }
-ciborium = "0.2.2"
+cbor4ii = { version = "1.0.0", features = ["serde", "serde1", "use_std"] }
 
 [dev-dependencies]
 log = "0.4"