sud is a daemon to execute interactive and non-interactive processes with special (and customizable) privileges in a nosuid environment It is based on a client/server model and on the ability to pass file descriptors between processes.