3 ms·
One great way you can make things more secure is by reducing attack surface. sudo is huge and old, and has tons of functionality that almost no one uses (like -
by danudey 1y ago
One great way you can make things more secure is by reducing attack surface. sudo is huge and old, and has tons of functionality that almost no one uses (like --chroot). A from-scratch rewrite with a focus on the 5% of features that 99% of users use means less code to test and audit. Also a newer codebase that hasn't grown and mutated over the course of 35 years is going to be a lot more focused and easier to reason about.
- gilcot 1y agoDo you mean doas ?
- pepoluan 1y agodoas is too much of a difference from sudo. For instance, it uses a completely different syntax for its config. sudo-rs is designed to be a drop-in replacement for maybr 95-99% of people who have been using sudo. (I do use doas on my own systems though)
- 1718627440 1y ago> Sudo is [...] old. This is a take I never understood. I get being huge, but old? Software doesn't age, when it is older it tends to have less bugs, not more.