> I dunno, all those arguments work both ways. They're both called screws as well […]

When I need "screw" functionality I can plainly see what kind of interface it has just by looking at it: Phillips-screw is clearly differentiated from Robertson-screw. When I need "sudo" functionality I cannot plainly see things: sudo-rs is not clearly differentiated from sudo-original.

Learning more about sudo-rs, I have now discovered that it does not have LDAP connectivity (and will never have it), and so for my $WORK it's a complete non-starter because we need that. But it's still called "sudo" even though it breaks functionality that real-sudo has (and that we need).

Sudo, sudo-rs, and doas are all "privilege authorization" systems, and they all generally do the same thing. Sudo was probably the first of the bunch and doas came later, but since it worked different and was not compatible they called it something else. Sudo-rs came later and is not (completely) compatible with (first) sudo — hence the article — but is still called sudo.

Not supporting certain wildcards (but still supporting others) breaks POLA.