Live data from Hacker News

Sudo for Windows

devblogs.microsoft.com

11–20 of 439 posts

Re: Sudo for Windows

#11

https://github.com/microsoft/sudo/issues/11 Interesting > Reserved > not blank! > We like to camp nice round number issues like this one, for future use. Can you reuse GitHub issue numbers, or what could be their intention here?

You can edit the issue to be whatever you want later. But I’ve never seen anyone pre-reserve issue numbers like this.

Re: Sudo for Windows

#14
post #6

If it were anyone but windows this sentence wouldn't alarm me like it does: > Sudo for Windows is a new way for users to run elevated commands directly from an unelevated console session

Why is that?

In all honesty, I have the same reservations. If you look at the authz schemes between the different flavors of operating systems you see that the 'set-uid' concept is comparatively ancient, battle hardened and based on well understood mechanisms.

This new functionality in Windows looks complicated. There's an architectural picture that involves:

* Multiple processes

* Windows RPC (On the basis of RPC? DCOM?)

* Handle inheritance

* Process integrity(?)

* Token privileges(?)

When UAC was introduced, there was a slew of bugs in the underlying RPC mechanism. I wonder if it will be the same. Can't wait to take a look at this in the debugger :)

I also wonder if MSRC will consider this a "security boundary". Based on the fact that the text references process integrity(UAC), and that _is not_ a security boundary, I'm going to guess not. That means that this could potentially introduce bugs, but MSRC will not be handing out bounties to fix things. Which means that any bugs people find are less likely to be reported, and more likely to find their way into ransomware down the line.

Re: Sudo for Windows

#15
Well, sudo for Windows has been a thing for, like, a few years now?... https://github.com/gerardog/gsudo

Not sure if this is the same thing, but this definitely should have shipped with the very first implementation of "oh, sure, you're an Administrator, but not really, since we're ignoring that bit" a.k.a. User Account Control.

That would have saved about a metric ton of misguided "here's how to turn off UAC" tutorials, but, ehm, yeah, anything to inject some life into the moribund Windows Insiders Program (the one where https://blogs.windows.com/windows-insider/ proudly headlines "What’s coming for the Windows Insider Program in 2023"), right?

Re: Sudo for Windows

#16
post #2

Yep, it's really happening. Sudo is coming to Windows. It's obviously not just a fork of the linux sudo - there's enough that's different about the permissions structure between OS's that just a straight port wouldn't make sense. But the dream of being able to run commands as admin, in the same terminal window - that's the experience we're finally bringing to users. I've been working on this for the last few months n…

[deleted]

Re: Sudo for Windows

#17

This will be a very controversial prediction, but mark my words: Windows will eventually use the Linux kernel.

Why not just keep the existing kernel running with a small team? Drivers and backwards compatibility are critical to many of Microsoft's enterprise customers.

Now that isn't necessarily true for Windows running in the cloud. Drivers don't matter as much there.

Re: Sudo for Windows

#18

https://github.com/microsoft/sudo/issues/11 Interesting > Reserved > not blank! > We like to camp nice round number issues like this one, for future use. Can you reuse GitHub issue numbers, or what could be their intention here?

> nice round number issues

But the number is 11? Is this Spinal Tap?

Re: Sudo for Windows

#19
post #2

Yep, it's really happening. Sudo is coming to Windows. It's obviously not just a fork of the linux sudo - there's enough that's different about the permissions structure between OS's that just a straight port wouldn't make sense. But the dream of being able to run commands as admin, in the same terminal window - that's the experience we're finally bringing to users. I've been working on this for the last few months n…

Can you share if this will ever come to Windows 10, or will it be a Windows 11+ exclusive thing?

I'm not even sure Win11 is on my company roadmap, much less anything cutting edge like an insiders release. Windows 10 Enterprise compatibility is pretty much required for widespread adoption of Sudo for Windows.

Re: Sudo for Windows

#20
post #2

Yep, it's really happening. Sudo is coming to Windows. It's obviously not just a fork of the linux sudo - there's enough that's different about the permissions structure between OS's that just a straight port wouldn't make sense. But the dream of being able to run commands as admin, in the same terminal window - that's the experience we're finally bringing to users. I've been working on this for the last few months n…

Can you share if this will ever come to Windows 10, or will it be a Windows 11+ exclusive thing?

Already working on it :) You can follow https://github.com/microsoft/sudo/issues/2 for updates.

Honestly, the hardest part will be porting the Settings app changes to the Windows 10 styles. `sudo.exe` itself doesn't really depend on any OS platform changes, and if it did, we'd have a _very_ compelling case to bring those features with us downlevel.

Post reply on HN