14 ms·

>CVE-2025-32463 Looks like a logic bug to me? So rust wouldn't have helped. Those are exactly the kind of bugs you might introduce when you do a rewrite.

• danudey 11mo ago
  One great way you can make things more secure is by reducing attack surface. sudo is huge and old, and has tons of functionality that almost no one uses (like --chroot). A from-scratch rewrite with a focus on the 5% of features that 99% of users use means less code to test and audit. Also a newer codebase that hasn't grown and mutated over the course of 35 years is going to be a lot more focused and easier to reason about.
  • gilcot 11mo ago
    Do you mean doas ?
    • pepoluan 11mo ago
      doas is too much of a difference from sudo. For instance, it uses a completely different syntax for its config. sudo-rs is designed to be a drop-in replacement for maybr 95-99% of people who have been using sudo. (I do use doas on my own systems though)
  • 1718627440 11mo ago
    > Sudo is [...] old. This is a take I never understood. I get being huge, but old? Software doesn't age, when it is older it tends to have less bugs, not more.
• tcfhgj 11mo ago
  A good type system can prevent all sorts of logic bugs