Adopting sudo-rs By Default in Ubuntu 25.10 | and status update on rust coreutils and rust PGP


in reply to Leaflet

Wrong move. To make sudo more secure, you should instead ditch 90% of the features intended for server which nobody on desktop uses. 150 lines of C code is enough to provide sudo-like functionality on desktop.
This entry was edited (Wednesday, May 7, 2025, 11:04 AM)
in reply to Leaflet

A way smaller alternative therefore less prompt to vulnerabilities is OpenDoas found on Arch/Artix/... and other distros. From the GH project:

doas is a minimal replacement for the venerable sudo. It was initially written by Ted Unangst of the OpenBSD project to provide 95% of the features of sudo with a fraction of the codebase.
This entry was edited (Wednesday, May 7, 2025, 9:26 AM)
in reply to Nanook

sudo-rs doesn't have anything to do with run0. Please take your pills grandpa, we're worried about you.

Edit: in case you're actually an older person, the latter part wasn't meant as a swipe (just saw your pfp). In that case, sorry!

This entry was edited (Wednesday, May 7, 2025, 11:46 AM)
in reply to Nanook

Go install WIndows 11 if this is what you want punk.


Don't install Ubuntu 25.10 if this isn't what you want. Using Ubuntu means accepting that they're going to make a lot of decisions about your system. The whole point of these large pre-configured Linux distros is that they make all of the decisions for you.

If you want more control than that try installing one of the other distros that allow you to choose the software you want.

in reply to FooBarrington

@FooBarrington You didn't just specify memory safe, you advocated stripping away a number of features. Yes memory safe anything is a good idea and I've got no objection to the use of rust, I think it's a good language, one of the few worthwhile efforts to emerge in recent years, but if it is going go be re-implemented, do so fully. Yes, anything that runs with privileges should be memory safe else it's open to attack and Rust certainly makes that more possible, I am just concerned about the limiting feature set aspect. I'm not in favor of protecting users from themselves, I don't want a car that is capable of reading speed limit signs and prevents me from exceeding them even if doing so might be unsafe or illegal, that not the car manufacturers job to be come an arm of the government, likewise I don't want Linux protecting me from myself, I already address potentials with regular backups, etc.

This website uses cookies. If you continue browsing this website, you agree to the usage of cookies.