Memory-safe sudo to become the default in Ubuntu

I am not sure if memory-safety is the biggest issue in sudo design. I find the fact that it is a setuid binary a much bigger issue because a bug can possible result in privilege escalation.<p>I found an alternative implementation that doesn&#x27;t rely in being a setuid binary like systemd-run0 much more interesting from a security perspective, but I am no security expert.

&gt; This move is part of a broader effort by Canonical to improve the resilience and maintainability of core system components. Sudo-rs is developed by the Trifecta Tech Foundation (TTF), a nonprofit organization that creates secure, open source building blocks for infrastructure software.<p>Ubuntu continuously updates itself without permission, killing apps and losing previous state. You have the Javascript based Gnome window manager that is always bugging out. The Ubuntu packages, drivers and kernel are laughably behind Debian and even further behind mainline. Ubuntu continues to morph into something I don&#x27;t believe in.<p>That all said, Rust is not a smoking gun for incorrect application logic. It could still happily incorrectly execute stuff with the wrong permissions or blow something up badly. I think it&#x27;s also a bad idea to offer it as a drop-in replacement when clearly features are still missing since a long time [1].<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;trifectatechfoundation&#x2F;sudo-rs&#x2F;issues?page=2">https:&#x2F;&#x2F;github.com&#x2F;trifectatechfoundation&#x2F;sudo-rs&#x2F;issues?pag...</a>

&gt; Ubuntu is the most widely deployed Linux operating system<p>Nitpicking, but I thought Android was the most widely deployed Linux OS around...

Seems like the trifecta group is &#x2F;just&#x2F; about migrating tools to rust? Am I understanding that right?<p>I don&#x27;t have a problem with it, specifically. Seems odd that they don&#x27;t advertise it, though.

Did sudo have memory problems? Did it ever fail because it didn&#x27;t handle its memory correctly?

How does sudo-rs compare to run0? <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40205714">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40205714</a>

&quot;This move is part of a broader effort by Canonical to improve the resilience and maintainability of core system components.&quot;<p>Somehow &quot;maintainability&quot; has never been something I&#x27;d ever associate with Ubuntu. Is it a reference to their source tree? That&#x27;d make a lot more sense than if they were referring to the OS itself.

Next they should adopt uutils[1] as coreutils, findutils, diffutils, etc alternative.<p>[1] <a href="http:&#x2F;&#x2F;github.com&#x2F;uutils&#x2F;">http:&#x2F;&#x2F;github.com&#x2F;uutils&#x2F;</a>

doas is a much simpler (and therefore better) alternative.

I have been using sudo-rs for over a year. The only issue that I&#x27;ve had is running into `-E` being unsupported once every few months - which is arguably a good thing because I shouldn&#x27;t be naughty and allow arbitrary envs to leak into a privileged session.

What are the implications of the license not being GPL?

That&#x27;s good to hear.

sudo-rs is already default AerynOS (SerpentOS).