Rust, make me a sudo!
summary
Reimplements common sudo use cases in Rust as a drop‑in binary called sudo-rs while keeping the final executable named sudo, funded by ISRG and built with Praetorian-style collaboration; current prototype parses sudoers and successfully runs commands on Linux using PAM but remains a setuid binary so many crates can’t be reused. Claims: memory safety and strong typing eliminate many C-era bugs; notes surprising legacy behaviors (case‑insensitive usernames, glob args allowing extra parameters, full I/O logging with regex filters) and asks for reports of nonstandard sudo usage.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:33We are rewriting sudo in Rust Tweede golf and Ferrous Systems are building a drop in replacement for common use
- 4:27Memory safety Of course you all know what I'm going to say
- 4:59But wait, sudo actually does a lot more Sudo allows a lot of customization, did you for example know that
- 8:02Memory safety is just the start Re-implementing sudo has a lot more advantages
- 10:42We can use your help We will be working on getting the basics working
related talks
19mRust Adoption At Scale
23mRust Adoption at Scale With Ubuntu
39mSudo For Defense: How can new or lesser-known features help you?
19mCounterexamples in Safe Rust
26mUnix systems programming in Rust
22mRust as a Foundation for a Safe and Sustainable Future
40mWhat's up with Rust?
45mBuilding Safe and Secure Systems in Rust