{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"oslo.rootwrap provides fine-grained filtering of shell commands to run as root from OpenStack services, enabling controlled escalation of permissions with minimal privilege exposure.","skillfed_tags":["openstack","privilege-escalation","command-filtering"],"use_cases":["Restrict which shell commands OpenStack services can execute as root, enforcing a whitelist-based policy.","Audit and log elevated-privilege command invocations for compliance and security monitoring.","Prevent privilege escalation attacks by validating command arguments before sudo execution.","Integrate permission filtering into multi-tenant cloud environments where isolation is critical."],"what_it_does":"oslo.rootwrap is an OpenStack library that sits between application code and the shell to enforce fine-grained permission policies on commands that need to run as root. Rather than granting blanket sudo access, it validates each command against a set of rules before allowing execution, reducing the attack surface when OpenStack services need elevated privileges.\n\nThe package is part of the OpenStack oslo namespace and is maintained as an active project. It has minimal dependencies (only debtcollector and pbr) and installs as a pure Python wheel, making it lightweight to integrate into OpenStack deployments or other systems that need controlled root command execution.","worth_installing":"Yes, if you are deploying or extending OpenStack services that require controlled root command execution. The permissive Apache 2.0 license, active maintenance, low install friction, and zero known vulnerabilities make it a safe choice. If you need root command filtering outside OpenStack, verify that its policy model aligns with your requirements first."},"id":"oslo-rootwrap","links":{"html":"https://skillfed.io/packages/oslo-rootwrap","md":"https://skillfed.io/packages/oslo-rootwrap.md","pypi":"https://pypi.org/project/oslo-rootwrap/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-10","license_spdx":"Apache-2.0","license_treatment":"permissive","name":"oslo.rootwrap","python_support":"supports_current","summary":"Oslo Rootwrap"},"popularity":{"monthly_downloads":140932,"position":11258,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"7.10.0"}