Ubuntu 25.10 Switches to Rust-based Sudo
https://www.omgubuntu.co.uk/2025/05/ubuntu-25-10-rust-sudo-rs-changeOpen linkView original on lemmy.mlSyndicated from the fediverse. Read and engage on the original instance.
View original on lemmy.mlhttps://www.omgubuntu.co.uk/2025/05/ubuntu-25-10-rust-sudo-rs-changeOpen linkView original on lemmy.ml
16 replies
Foreshadowing some tension...
Relevant XKCD
https://xkcd.com/1172/
Thats a good one
Rare Canonical W. The only thing I miss from the original sudo is
sudoedit, but I'm pretty sure that's on the Rust implementation's TODO list.They've got a few months to get it done, and it shouldn't be that hard, no? Just exec EDITOR as a child process, no?
It also does input validation to ensure one doesn’t break the sudo file.
Sure. I guess it would depend on how complex that is, but surely the sudo command already does validations, so it would just need to have the editor write to a temporary file (which is a copy of the official one) and write once it's validated, right?
It sounds doable in a few months.
I don't think it's that simple. The challenge is that you need to still behave as if it's invoked as the user so that the editor uses their configurations instead of simply
execing it asroot.I could be wrong though
¯\_(ツ)_/¯Sudo uses the setuid bit or whatever, so it still has access to the user's environment variables and whatnot. So figuring out which editor to run shouldn't be an issue.
That's not what I mean. Yeah, getting the environment variables are simple enough, but if you simply
execsomething as therootuser, whatever youexecwill naturally be looking for configs in/root/.configand not your~/.configdir, so any configurations to things like your text editor won't be read.Ah, makes sense. It's easy enough to duplicate the outer ENV for the sub-process, but I don't know what that means for security and whatnot.
Yep. They make some strange decisions sometimes but this isn't one of them.
Time for people to be mad that sudo-rs isn't GPL even though the original sudo wasn't GPL either.
It isn't? What is it's license then
Wikipedia says ISC
Surely this won't upset people.