Sudo-Rs Affected by Multiple Security Vulnerabilities

(phoronix.com)

9 points | by wahern 18 hours ago ago

5 comments

  • branon 15 hours ago ago

    I don't use Ubuntu anymore, partly because of their habit of running experiments like the coreutils switch, but I must say I do admire them for it. They seem committed to pushing the ecosystem forward, even if they have taken a leaf from Microsoft's book and are treating their users as test subjects.

  • stephenlf 15 hours ago ago

    Here before the haters. sudo was released around 1980. sudo-rs v. 0.2.0 was released in 2023. I suspect that in the next 2-5 years sudo-rs will be as safe and stable as sudo

    • ok_dad 15 hours ago ago

      If sudo is as stable as you say, which I’m sure it is, then why are we retiring it for a new rust version over several years which will allow extra security issues during that time?

      Maybe writing things in rust is a good idea, but perhaps not stuff that’s already battle hardened, IMO.

      • hulitu 3 hours ago ago

        > Maybe writing things in rust is a good idea, but perhaps not stuff that’s already battle hardened, IMO

        Some people _love_ to learn the hard way, but some never learn. And, as someone said: "But that's what happens when there is no incentive for people to do the parts of programming that aren't fun. Fixing bugs isn't fun; going through the bug list isn't fun; but rewriting everything from scratch is fun (because "this time it will be done right", ha ha) and so that's what happens, over and over again. "

  • pmontra 8 hours ago ago