points by WhyNotHugo 1 day ago | 0 comments
sudo.rs is a really weird direction for an evolution — it re-implements a complex piece of security dropping some arbitrary choices but keeping it pretty complex. It has the exact same security model. I honestly can't understand the appeal.
If you want something similar but simpler, go for doas.
If you need all the features in sudo, keep using sudo.
If you want to try new security models, try s6-sudo, or any other of various tools out there.
sudo-rs keeping the same name is actually a worse breakage — because it doesn't have the same API as sudo (as described by op), but has the same name and pretends to be a drop-in replacement while also not being a drop-in.
[–] egorfine 23 hours ago
[–] KitsumiTheFox 23 hours ago
I fail to see how the term virtue signaling applies to what you highlighted, care to elaborate?
[–] egorfine 22 hours ago
Rust rewrites of existing rock stable applications is only done for performative reasons as there are no merits.
[–] db48x 16 hours ago
Sudo may not be as “rock stable” as you suppose. The sudo-rs project has discovered a number of exploitble bugs in sudo that had existed for years.
And remember that sudo was itself a replacement for earlier tools like su. It has no special claim to be the one and only tool for the job.
[–] pjmlp 22 hours ago
And pimp up my CV kind of stuff.
[–] kelseyfrog 22 hours ago
The virtues being signaled are trust, reliability, and generosity. The mechanism is rust-washing. Like greenwashing, rust-washing has the appearance of and takes credit for the virtues without actually delivering on them.
Virtue signaling.