11–18 of 18 posts
Earlier quoted context omitted.
Everything to do with reimplementing sudo, though. But sudo has its share of CVEs as well (latest CVE-2025-32463), so perhaps a fresh look on the tool is warranted; perhaps some learnings have been taken from it.
A fresh look would be perhaps doas [1] from the OpenBSD project. [1]: https://man.openbsd.org/doas.1
as far as i can see, it's just programming errors, nothing to do with rust.
Earlier quoted context omitted.
Everything to do with reimplementing sudo, though. But sudo has its share of CVEs as well (latest CVE-2025-32463), so perhaps a fresh look on the tool is warranted; perhaps some learnings have been taken from it.
I think if rust was used to replace other bits (say things like utilities like grep or whatever) instead of security vital things like sudo, there would be less complaints.
What were the actual fixes like?
There is a link to github commit in the "Notes" section for each CVE [1]. [1]: https://security-tracker.debian.org/tracker/source-package/r...
Maybe model checkers could be used, but perhaps the search space is too large for all the featuers, and keeping the source in sync with the model could be quite fragile. And who knows, maybe the model would have the same issue.
as far as i can see, it's just programming errors, nothing to do with rust.
(Obligatory disclaimer: I love rust, I hate fanboys and rewrites)
Earlier quoted context omitted.
There is a link to github commit in the "Notes" section for each CVE [1]. [1]: https://security-tracker.debian.org/tracker/source-package/r...
Well, doesn't seem the issue would have been avoidable other than with "harder thinking" or better testing or something like that. Maybe model checkers could be used, but perhaps the search space is too large for all the featuers, and keeping the source in sync with the model could be quite fragile. And who knows, maybe the model would have the same issue.
Earlier quoted context omitted.
I think if rust was used to replace other bits (say things like utilities like grep or whatever) instead of security vital things like sudo, there would be less complaints.
Do you mean like uutils/coreutils.. Which certainly collects complaints :).