Remix.run Logo
▲ WhyNotHugo 3 days ago

sudo.rs is a really weird direction for an evolution — it re-implements a complex piece of security dropping some arbitrary choices but keeping it pretty complex. It has the exact same security model. I honestly can't understand the appeal.

If you want something similar but simpler, go for doas.

If you need all the features in sudo, keep using sudo.

If you want to try new security models, try s6-sudo, or any other of various tools out there.

sudo-rs keeping the same name is actually a worse breakage — because it doesn't have the same API as sudo (as described by op), but has the same name and pretends to be a drop-in replacement while also not being a drop-in.

▲scrubs 16 hours ago | parent | next [-]

I like this comment. Try something that's smaller (yet still minimal and complete) or stick with the devil we know, sudo. Not ideological; practical.

▲egorfine 2 days ago | parent | prev [-]

> I honestly can't understand the appeal.

Virtue signaling.

▲KitsumiTheFox 2 days ago | parent [-]

I fail to see how the term virtue signaling applies to what you highlighted, care to elaborate?

▲egorfine 2 days ago | parent | next [-]

Rust rewrites of existing rock stable applications is only done for performative reasons as there are no merits.

▲db48x 2 days ago | parent | next [-]

Sudo may not be as “rock stable” as you suppose. The sudo-rs project has discovered a number of exploitble bugs in sudo that had existed for years.

And remember that sudo was itself a replacement for earlier tools like su. It has no special claim to be the one and only tool for the job.

▲pjmlp 2 days ago | parent | prev [-]

And pimp up my CV kind of stuff.

▲kelseyfrog 2 days ago | parent | prev [-]

The virtues being signaled are trust, reliability, and generosity. The mechanism is rust-washing. Like greenwashing, rust-washing has the appearance of and takes credit for the virtues without actually delivering on them.