▲ 204 ▼ Sudo's maintainer needs resources to keep utility updated (www.theregister.com) submitted 8 months ago* (last edited 8 months ago) by costalfy@programming.dev to c/linux@programming.dev 21 comments fedilink hide all child comments
[–] negativenull@piefed.world 74 points 8 months ago* (last edited 8 months ago) (7 children) Living embodiment of: https://xkcd.com/2347/ permalink fedilink source hideshow 7 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (6 children) Nah we got several alternatives, like sudo-rs, doas (my personal choice), please, etc. All good. permalink fedilink source parent hideshow 6 child comments replies: [–] pizza_the_hutt@sh.itjust.works 27 points 8 months ago (5 children) sudo-rs doesn't implement all the functionality of regular sudo, which causes certain applications to break. I had to install sudo.ws on the latest Ubuntu to get regular sudo back. Many installation scripts depend on sudo, not alternatives. permalink fedilink source parent hideshow 5 child comments replies: [–] victorz@lemmy.world -2 points 8 months ago (4 children) It's simple to just symlink whatever you want to sudo and have it work in the same way. These alternatives implement enough for most use cases to make them viable IMO. Any software that invokes a privilege escalation utility should have a setting or option to choose which such utility should be invoked. Otherwise the software should be run with already escalated privileges, if it needs them to function. Or call a library that can do privilege escalation, after asking for credentials. That's my take. 🤷♂️ permalink fedilink source parent hideshow 4 child comments replies: [–] chrib@feddit.org 12 points 8 months ago (3 children) Not really. With sudo you can to set the correct selinux contexts when running commands (on selinux enabled systems). Doas and sudo-rs don’t seem to support this currently. permalink fedilink source parent hideshow 3 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] victorz@lemmy.world -3 points 8 months ago (6 children) Nah we got several alternatives, like sudo-rs, doas (my personal choice), please, etc. All good. permalink fedilink source parent hideshow 6 child comments replies: [–] pizza_the_hutt@sh.itjust.works 27 points 8 months ago (5 children) sudo-rs doesn't implement all the functionality of regular sudo, which causes certain applications to break. I had to install sudo.ws on the latest Ubuntu to get regular sudo back. Many installation scripts depend on sudo, not alternatives. permalink fedilink source parent hideshow 5 child comments replies: [–] victorz@lemmy.world -2 points 8 months ago (4 children) It's simple to just symlink whatever you want to sudo and have it work in the same way. These alternatives implement enough for most use cases to make them viable IMO. Any software that invokes a privilege escalation utility should have a setting or option to choose which such utility should be invoked. Otherwise the software should be run with already escalated privileges, if it needs them to function. Or call a library that can do privilege escalation, after asking for credentials. That's my take. 🤷♂️ permalink fedilink source parent hideshow 4 child comments replies: [–] chrib@feddit.org 12 points 8 months ago (3 children) Not really. With sudo you can to set the correct selinux contexts when running commands (on selinux enabled systems). Doas and sudo-rs don’t seem to support this currently. permalink fedilink source parent hideshow 3 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] pizza_the_hutt@sh.itjust.works 27 points 8 months ago (5 children) sudo-rs doesn't implement all the functionality of regular sudo, which causes certain applications to break. I had to install sudo.ws on the latest Ubuntu to get regular sudo back. Many installation scripts depend on sudo, not alternatives. permalink fedilink source parent hideshow 5 child comments replies: [–] victorz@lemmy.world -2 points 8 months ago (4 children) It's simple to just symlink whatever you want to sudo and have it work in the same way. These alternatives implement enough for most use cases to make them viable IMO. Any software that invokes a privilege escalation utility should have a setting or option to choose which such utility should be invoked. Otherwise the software should be run with already escalated privileges, if it needs them to function. Or call a library that can do privilege escalation, after asking for credentials. That's my take. 🤷♂️ permalink fedilink source parent hideshow 4 child comments replies: [–] chrib@feddit.org 12 points 8 months ago (3 children) Not really. With sudo you can to set the correct selinux contexts when running commands (on selinux enabled systems). Doas and sudo-rs don’t seem to support this currently. permalink fedilink source parent hideshow 3 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] victorz@lemmy.world -2 points 8 months ago (4 children) It's simple to just symlink whatever you want to sudo and have it work in the same way. These alternatives implement enough for most use cases to make them viable IMO. Any software that invokes a privilege escalation utility should have a setting or option to choose which such utility should be invoked. Otherwise the software should be run with already escalated privileges, if it needs them to function. Or call a library that can do privilege escalation, after asking for credentials. That's my take. 🤷♂️ permalink fedilink source parent hideshow 4 child comments replies: [–] chrib@feddit.org 12 points 8 months ago (3 children) Not really. With sudo you can to set the correct selinux contexts when running commands (on selinux enabled systems). Doas and sudo-rs don’t seem to support this currently. permalink fedilink source parent hideshow 3 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] chrib@feddit.org 12 points 8 months ago (3 children) Not really. With sudo you can to set the correct selinux contexts when running commands (on selinux enabled systems). Doas and sudo-rs don’t seem to support this currently. permalink fedilink source parent hideshow 3 child comments replies: [–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] victorz@lemmy.world -3 points 8 months ago (2 children) Not really. Not really what? What are you referring to? permalink fedilink source parent hideshow 2 child comments replies: [–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] chrib@feddit.org 9 points 8 months ago (1 child) That a simple symlink of sudo to a replacement will suffice. permalink fedilink source parent hideshow 1 child comment replies: [–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent
[–] victorz@lemmy.world -4 points 8 months ago These alternatives implement enough for most use cases to make them viable IMO. permalink fedilink source parent