SYNTAX

    sudo [options] <exe-name> [<arguments>]


OPTIONS

-h (--help) bool

Display help.

-a (--add-cap) string

Adds the specified capability. Can be specified more than once.

-r (--remove-cap) string

Removes the specified capability (if a cap is included in both add and remove lists, the remove takes precedence). Can be specified more than once.

-s (--sid) uint

Sets the Secure ID to the specified value.

-v (--vid) uint

Sets the Vendor ID to the specified value.

-m (--heap-min) uint

Sets the process's default minimum heap size to the specified value (in bytes).

-x (--heap-max) uint

Sets the process's default maximum heap size to the specified value (in bytes).

-z (--stack-size) uint

Sets the process's default stack size to the specified value (in bytes).

-p (--process-priority) int

Sets the process priority to the specified value (as per TProcessPriority).

low

150

background

250

foreground

350

high

450

windowserver

650

fileserver

750

realtimeServer

850

supervisor

950

-k (--keep) bool

Do not delete the modified exe when the process exits. If the exe is in the Core ROM, this option will keep the modified binary in memory until next reboot, such that any other code that launches the exe will pick up these settings (running sudo a second time on this exe without --keep will undo it).

-d (--disk) bool

Change the on-disk binary rather than modifying the in-memory kernel process attributes. This option is required for changing heap and stack sizes. On WINSCW the --disk option still operates on E32 binaries, therefore it is not possible to modify a WINSCW binary with --disk.

-w (--wait) bool

Wait for a keypress before resuming the process. Use this option if you need to examine the process before it runs.


ARGUMENTS

<exe-name>

The executable to modify then launch. [string]

[<arguments>]

Arguments to pass to the exe. Any further arguments or options will be coalesced into this one. [string]


DESCRIPTION

Launch an executable with modified capabilities and / or other properties.

The command operates in one of two modes, depending on whether --disk is specified. With this option, a copy of the exe is made on the C drive, modified there then executed. Without it, the process is launched then before it is resumed the properties are modified in the kernel. The default (without --disk) is neater but is limited in that it cannot change heap or stack sizes, and if the DLLs that are linked to have too many capabilities to allow the exe to launch as is, you won't get far enough to change them. Previously the --disk option was the default. If no capability or sid etc options are specified then the exe will be launched with capabilities All -TCB and no other changes.


COPYRIGHT

Copyright (c) 2008-2010 Accenture. All rights reserved.