Live data from Hacker News

Memory-safe sudo to become the default in Ubuntu

trifectatech.org

281–282 of 282 posts

Re: Memory-safe sudo to become the default in Ubuntu

#281

Earlier quoted context omitted.

We need a doas-rs port that is maintained, i guess.

Just as with the sudo-rs reimplementation, a doas-rs rewrite is not going to solve the inherent issues we get with SUID binaries. We are better off implementing better models (see ssh and run0).

Again I did not claim it will solve that issue. I am simply suggesting that doas has an easy to use interface and I prefer it over sudo. Somebody pointed out that doas is not maintained on Linux, so I think it would be great to reqrite it in Rust and keep it maintained.

Re: Memory-safe sudo to become the default in Ubuntu

#282
post #5

Earlier quoted context omitted.

Removing LDAP is a huge problem for the more important sudo deployments though: centralized management of permissions is kind of a vital function.

Those people can keep using sudo; it’s not going away. The rest of us get better security.

Having to type doas on systems without LDAP and sudo on systems with LDAP is abstraction leakage.
Post reply on HN