3 ms·

"rewrite in Rust for no good reason" `sudo` just had an array-out-of-bounds CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43995 https://cve.mitre

• lelanthran 4y ago
  > `sudo` just had an array-out-of-bounds CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4399 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4399... So? Sudo is so notorious for being a mess that the BSD people made their own - doas. Rewriting sudo is "for no reason" when doas already exists. You're effectively rewriting doas.
  • rpigab 4y ago
    This sounds oversimplified. sudo is complex, and people had a simpler usecase, so they used a simpler alternative. Some people need the complex features, and it's fine, and maybe they're fine with the risk of a difficult to audit codebase and risk of catastrophic failure, and we don't need any new alternative, so they can continue to use sudo as it is. "The core of the problem was really that some people like to use sudo to build elaborate sysadmin infrastructures with highly refined sets of permissions and checks and balances" -- tedu https://flak.tedunangst.com/post/doas https://flak.tedunangst.com/post/doas So a rewrite of sudo is Rust could add value by allowing it to add complex features, and keeping memory safety, even if code auditing would stay complex, and small logic errors can have catastrophic outcomes.