3 ms·

Ubuntu 26.04 ends a 40-year old sudo tradition

20 points by campuscodi 7mo ago

0_____0 7mo ago
Oh good! I thought they'd gotten rid of the sudo Lecture that comes up when you first use it. With great power... And so forth.
- nxobject 7mo ago
  Well, I will admit that I find the first part jarring: "we trust you have received the usual lecture from the local System Administrator." I'm like: I'm running this on OpenWRT, so should I go to a local university to talk to a actual *nix sysadmin?
  - deleted 7mo ago
    [deleted]
- sevenseacat 7mo ago
  This incident will be reported!!
add-sub-mul-div 7mo ago
Decades of real world use and hardening are more valuable than anything a rewrite can promise or provide. But the not-invented-recently culture comes for everything.
pss314 7mo ago
sudo-rs is one of the initiatives of Prossimo https://www.memorysafety.org/ https://www.memorysafety.org/
worthless-trash 7mo ago
Ubuntu hasn't had 40 years of it to make 40 years of tradition.
alexjurkiewicz 7mo ago
I wish sudo-rs and all projects being used in production would suck it up and release a major version v1. Seeing v0.xxx on a program used by Ubuntu as a base system utility is ridiculous. You don't have to try and contort the version numbers of a user-facing utility to fit into the semver API spec, but at least bump to v1.0.0 and continue from there!
sherr 7mo ago
There are alternatives to sudo other than the new Rust version here. "doas" [1] comes from OpenBSD and is a smaller (LOC) tool, easier to audit and keep secure (supposedly). Also available for Linux. Also "run0" [2], another alternative that comes from the Linux/Systemd camp, using "polkit" and is similar to "systemd-run". [1] https://man.openbsd.org/doas.1 https://man.openbsd.org/doas.1 [2] https://www.freedesktop.org/software/systemd/man/257/run0.html https://www.freedesktop.org/software/systemd/man/257/run0.ht...
- NekkoDroid 7mo ago
  > Also "run0" [2], another alternative that comes from the Linux/Systemd camp, using "polkit" and is similar to "systemd-run". It literally is `systemd-run`, just with slightly different defaults (multi-call binary). Unlike `sudo` and `doas` it inherits almost nothing from where it gets launched, which can be very unexpected if you simply treat it as a drop-in replacement for the 2.
defaultcompany 7mo ago
“shoulder surfing” is not the problem. It’s people making videos or live streaming who will risk accidentally exposing password length.

20 points by campuscodi 7mo ago

Oh good! I thought they'd gotten rid of the sudo Lecture that comes up when you first use it. With great power... And so forth.

nxobject 7mo ago
Well, I will admit that I find the first part jarring: "we trust you have received the usual lecture from the local System Administrator." I'm like: I'm running this on OpenWRT, so should I go to a local university to talk to a actual *nix sysadmin?
- deleted 7mo ago
  [deleted]
sevenseacat 7mo ago
This incident will be reported!!

add-sub-mul-div 7mo ago

Decades of real world use and hardening are more valuable than anything a rewrite can promise or provide. But the not-invented-recently culture comes for everything.

pss314 7mo ago

sudo-rs is one of the initiatives of Prossimo https://www.memorysafety.org/ https://www.memorysafety.org/

worthless-trash 7mo ago

Ubuntu hasn't had 40 years of it to make 40 years of tradition.

alexjurkiewicz 7mo ago

I wish sudo-rs and all projects being used in production would suck it up and release a major version v1. Seeing v0.xxx on a program used by Ubuntu as a base system utility is ridiculous. You don't have to try and contort the version numbers of a user-facing utility to fit into the semver API spec, but at least bump to v1.0.0 and continue from there!

sherr 7mo ago

There are alternatives to sudo other than the new Rust version here. "doas" [1] comes from OpenBSD and is a smaller (LOC) tool, easier to audit and keep secure (supposedly). Also available for Linux. Also "run0" [2], another alternative that comes from the Linux/Systemd camp, using "polkit" and is similar to "systemd-run". [1] https://man.openbsd.org/doas.1 https://man.openbsd.org/doas.1 [2] https://www.freedesktop.org/software/systemd/man/257/run0.html https://www.freedesktop.org/software/systemd/man/257/run0.ht...

NekkoDroid 7mo ago
> Also "run0" [2], another alternative that comes from the Linux/Systemd camp, using "polkit" and is similar to "systemd-run". It literally is `systemd-run`, just with slightly different defaults (multi-call binary). Unlike `sudo` and `doas` it inherits almost nothing from where it gets launched, which can be very unexpected if you simply treat it as a drop-in replacement for the 2.

defaultcompany 7mo ago

“shoulder surfing” is not the problem. It’s people making videos or live streaming who will risk accidentally exposing password length.