Ubuntu 26.04's Rust sudo breaks compatibility with standard sudo
The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
Ubuntu 26.04 ships a sudo rewritten in Rust, and it isn't fully compatible with the original. The Hacker News thread weighs the tradeoffs: some argue tools must be allowed to evolve and that half of Linux's problems come from clinging to 1980s designs, while others defend the change by calling sudoers glob expressions a dangerous footgun that is trivial to replace with a few explicit lines.
Tools have to be allowed to evolve. Half the Linux ecosystem's problems are caused by sticking on some design that made sense in 1980.
- davb
Further validation of our decision to move to Debian (as if the sluggish kernel updates and ramming of snaps down our throats weren’t enough). We migrated a few hundred lab machines this summer, and have around half of our servers and containers switched over. It has gone very smoothly.
- Vaushite
Tools have to be allowed to evolve. Half the Linux ecosystem's problems are caused by sticking on some design that made sense in 1980.
At least the command is still called sudo or run0. Changing it to doas would have been a much more breaking change.
Alas, TFA blocks me with no workaround because I'm using Tor Browser so I can't read about the nature of the changes.
- orf
Sudoers glob expressions are a horrible footgun and I have little empathy for anyone complaining about their removal, especially when it’s trivial to fix with 3 extra (explicit) lines.
- randomblock1
This is trivial to fix, at least for you.
%corestaff ALL=NOPASSWD: /usr/bin/mailq "", \
/usr/sbin/exim -bp, \
/usr/sbin/exim -bpa, \
/usr/sbin/exim -bpc, \
/usr/sbin/exim -bpr, \
/usr/sbin/exim -bpu
That being said there definitely should be an automated way to check for incompatibilities between normal and rust sudo.
- proneb1rd
Strange that such issues haven’t been probed with ai. It’s good st finding regressions
- ikmckenz
If they were going to make breaking changes anyways, they should have just switched to the much simpler `doas`
- dr_hooo
It also doesn't work with ansible, as I recently found out...
- markhahn
I prefer to have sudo uninstalled.