{"slug": "sudo-rs", "name": "sudo-rs", "category": "terminal", "category_name": "Terminal and shell", "description": "", "recommenders": 3, "commenters": 17, "warners": 10, "score": -5.172, "rising": -0.98, "first": "2025-11-11", "latest": "2026-09-15", "why": "", "why_is_quote": false, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 3, "compare": 1, "warn": 10}, "spark": [1, 0, 0, 1, 1, 0, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/trifectatechfoundation/sudo-rs", "official_url": "https://github.com/trifectatechfoundation/sudo-rs", "pricing": "", "aliases": ["sudo-rs"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 759437952, "item_id": 47464872, "url": "https://news.ycombinator.com/item?id=47464872", "by": "timhh", "date": "2026-03-21", "stance": "recommend", "quote": "so it did require sudo-rs to exist", "excerpt": "I did this! I didn't actually know that Mint had enabled this by default. That would have been a useful counterpoint to the naysayers. If you want the original behaviour you don't actually need to change the configuration - they added a patch afterwards so you can press tab and it will hide the password just for that time. > The catalyst for Ubuntu\u2019s change is sudo-rs Actually it was me getting sufficiently pissed of", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}, {"id": 754160416, "item_id": 47135026, "url": "https://news.ycombinator.com/item?id=47135026", "by": "bboozzoo", "date": "2026-02-24", "stance": "recommend", "quote": "sudo-rs and a bunch of others are maintained by", "excerpt": "> - Tried to reinvent the wheel with sudo-rs reinvent how? sudo-rs and a bunch of others are maintained by: https://trifectatech.org/ a non profit registered in Netherlands", "context": "", "use_case": "", "switched_from": "", "story": "What it means that Ubuntu is using Rust"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 795334032, "item_id": 49708377, "url": "https://news.ycombinator.com/item?id=49708377", "by": "t0duf0du", "date": "2026-09-15", "stance": "warn", "quote": "I was bummed when I came across this", "excerpt": "I was bummed when I came across this: https://github.com/trifectatechfoundation/sudo-rs/issues/1299", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 795237520, "item_id": 49702345, "url": "https://news.ycombinator.com/item?id=49702345", "by": "lioeters", "date": "2026-09-14", "stance": "warn", "quote": "Security issues discovered in sudo-rs", "excerpt": "Ah I see, found it. Security issues discovered in sudo-rs - https://lists.debian.org/debian-security-announce/2025/msg00218.html Sudo-Rs Affected by Multiple Security Vulnerabilities - https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10 Sudo-rs enables password feedback by default - https://www.phoronix.com/news/sudo-rs-password-feedback", "context": "", "use_case": "Sudo replacement", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 790001921, "item_id": 49375120, "url": "https://news.ycombinator.com/item?id=49375120", "by": "modularitynew", "date": "2026-08-20", "stance": "warn", "quote": "they were forced into Ubuntu despite bugs and memory unsafety in the Rust implementations", "excerpt": "Even without any LLM usage after the rewrite, there might be a change in license as seen with similar projects, which supports your argument. From the article: > The company points to projects such as uutils coreutils and sudo-rs as examples of Rust implementations that have earned a place in the distribution. uutils is licensed under MIT, instead of GPL like the original coreutils, and thus it would be easier to gra", "context": "", "use_case": "", "switched_from": "", "story": "Canonical Backs New Project to Translate Large C Codebases into Safe Rust"}, {"id": 754078834, "item_id": 47129927, "url": "https://news.ycombinator.com/item?id=47129927", "by": "h4kunamata", "date": "2026-02-23", "stance": "warn", "quote": "Tried to reinvent the wheel with sudo-rs", "excerpt": "Ubuntu used to be the distro to go do, used to. - SNAP which is only managed and supported by them - Tried to reinvent the wheel with sudo-rs - They are heavily focused into cloud, servers and business - Following the Rust hype train I used Ubuntu for 13y or so, it is a Windows within Linux world. Bloated, kernel panic, heavy, privacy issues. Debian still the king to be used as servers, Mint Cinnamon is the king for ", "context": "", "use_case": "", "switched_from": "", "story": "What it means that Ubuntu is using Rust"}]}], "who": [], "tags": [], "use_cases": ["sudo replacement", "rust sudo replacement"], "compared": [{"slug": "sudo", "name": "sudo", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "miri", "name": "Miri", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "uutils-coreutils", "name": "uutils coreutils", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49696697", "title": "Ubuntu 26.10 completes transition to Rust-based coreutils", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=47125286", "title": "What it means that Ubuntu is using Rust", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47062748", "title": "Zero-day CSS: CVE-2026-2441 exists in the wild", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=46387164", "title": "Memory Safety", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=46090009", "title": "Ported freetype, fontconfig, harfbuzz, and graphite to Fil-C", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=45898377", "title": "Security issues discovered in sudo-rs", "mentions": 2}], "sentiment_by_month": {"2025-11": {"warn": 3, "neutral": 2, "recommend": 1}, "2025-12": {"warn": 2}, "2026-01": {}, "2026-02": {"warn": 2, "compare": 1, "recommend": 1}, "2026-03": {"recommend": 1}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"warn": 1}, "2026-09": {"warn": 2, "neutral": 1}, "2026-10": {}}, "quotes": [{"id": 795349632, "item_id": 49709352, "url": "https://news.ycombinator.com/item?id=49709352", "by": "collinfunk", "date": "2026-09-15", "stance": "neutral", "quote": "They seem pretty upfront that it isn't their goal.", "excerpt": "I don't think sudo-rs ever advertised itself as a drop in replacement. They seem pretty upfront that it isn't their goal. See this list: https://github.com/trifectatechfoundation/sudo-rs#differences-from-original-sudo", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 795334032, "item_id": 49708377, "url": "https://news.ycombinator.com/item?id=49708377", "by": "t0duf0du", "date": "2026-09-15", "stance": "warn", "quote": "I was bummed when I came across this", "excerpt": "I was bummed when I came across this: https://github.com/trifectatechfoundation/sudo-rs/issues/1299", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 795237520, "item_id": 49702345, "url": "https://news.ycombinator.com/item?id=49702345", "by": "lioeters", "date": "2026-09-14", "stance": "warn", "quote": "Security issues discovered in sudo-rs", "excerpt": "Ah I see, found it. Security issues discovered in sudo-rs - https://lists.debian.org/debian-security-announce/2025/msg00218.html Sudo-Rs Affected by Multiple Security Vulnerabilities - https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10 Sudo-rs enables password feedback by default - https://www.phoronix.com/news/sudo-rs-password-feedback", "context": "", "use_case": "Sudo replacement", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 790001921, "item_id": 49375120, "url": "https://news.ycombinator.com/item?id=49375120", "by": "modularitynew", "date": "2026-08-20", "stance": "warn", "quote": "they were forced into Ubuntu despite bugs and memory unsafety in the Rust implementations", "excerpt": "Even without any LLM usage after the rewrite, there might be a change in license as seen with similar projects, which supports your argument. From the article: > The company points to projects such as uutils coreutils and sudo-rs as examples of Rust implementations that have earned a place in the distribution. uutils is licensed under MIT, instead of GPL like the original coreutils, and thus it would be easier to gra", "context": "", "use_case": "", "switched_from": "", "story": "Canonical Backs New Project to Translate Large C Codebases into Safe Rust"}, {"id": 759437952, "item_id": 47464872, "url": "https://news.ycombinator.com/item?id=47464872", "by": "timhh", "date": "2026-03-21", "stance": "recommend", "quote": "so it did require sudo-rs to exist", "excerpt": "I did this! I didn't actually know that Mint had enabled this by default. That would have been a useful counterpoint to the naysayers. If you want the original behaviour you don't actually need to change the configuration - they added a patch afterwards so you can press tab and it will hide the password just for that time. > The catalyst for Ubuntu\u2019s change is sudo-rs Actually it was me getting sufficiently pissed of", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}, {"id": 754160416, "item_id": 47135026, "url": "https://news.ycombinator.com/item?id=47135026", "by": "bboozzoo", "date": "2026-02-24", "stance": "recommend", "quote": "sudo-rs and a bunch of others are maintained by", "excerpt": "> - Tried to reinvent the wheel with sudo-rs reinvent how? sudo-rs and a bunch of others are maintained by: https://trifectatech.org/ a non profit registered in Netherlands", "context": "", "use_case": "", "switched_from": "", "story": "What it means that Ubuntu is using Rust"}, {"id": 754078834, "item_id": 47129927, "url": "https://news.ycombinator.com/item?id=47129927", "by": "h4kunamata", "date": "2026-02-23", "stance": "warn", "quote": "Tried to reinvent the wheel with sudo-rs", "excerpt": "Ubuntu used to be the distro to go do, used to. - SNAP which is only managed and supported by them - Tried to reinvent the wheel with sudo-rs - They are heavily focused into cloud, servers and business - Following the Rust hype train I used Ubuntu for 13y or so, it is a Windows within Linux world. Bloated, kernel panic, heavy, privacy issues. Debian still the king to be used as servers, Mint Cinnamon is the king for ", "context": "", "use_case": "", "switched_from": "", "story": "What it means that Ubuntu is using Rust"}, {"id": 753338208, "item_id": 47083638, "url": "https://news.ycombinator.com/item?id=47083638", "by": "joshuamorton", "date": "2026-02-19", "stance": "compare", "quote": "", "excerpt": "> but its code has lots of unsafe. And every instance of unsafe that I could find (except one, in test-only code) was a call to libc with a clarifying comment on why this particular use was safe. That is, all (or at least, all of it that I could find) was wrapping an unsafe API with documented (and usually straightforward and local) invariants that maintain safety, such that the calling code is safe. I'd say that the", "context": "", "use_case": "", "switched_from": "", "story": "Zero-day CSS: CVE-2026-2441 exists in the wild"}, {"id": 753134224, "item_id": 47070889, "url": "https://news.ycombinator.com/item?id=47070889", "by": "ceteia", "date": "2026-02-18", "stance": "warn", "quote": "it proclaimed loudly that it is memory safe, but its code has lots of unsafe", "excerpt": "How can you be sure? When I looked at for instance sudo-rs, it proclaimed loudly that it is memory safe, but its code has lots of unsafe. https://github.com/trifectatechfoundation/sudo-rs https://grep.app/search?f.repo=trifectatechfoundation%2Fsudo-rs&f.repo.pattern=sudo&q=unsafe And Miri is very popular in Rust. Even if a Rust project doesn't have unsafe, sometimes people still run Miri with it, since dependencies m", "context": "", "use_case": "Rust sudo replacement", "switched_from": "", "story": "Zero-day CSS: CVE-2026-2441 exists in the wild"}, {"id": 742236672, "item_id": 46389792, "url": "https://news.ycombinator.com/item?id=46389792", "by": "vlovich123", "date": "2025-12-25", "stance": "warn", "quote": "", "excerpt": "Reading comprehension and critical thinking again missing from your post. The article would only \u201cinvalidate\u201d what I wrote if the sudo-rs vulnerability was a result of memory safety. That isn\u2019t what these vulnerabilities are. By the way, the data on this is so clear and readily available about the real world reduction in memory safety issues Rust has in the real world I really don\u2019t understand how you\u2019re doubling dow", "context": "", "use_case": "", "switched_from": "", "story": "Memory Safety"}, {"id": 742209280, "item_id": 46388080, "url": "https://news.ycombinator.com/item?id=46388080", "by": "redbeeswimming", "date": "2025-12-25", "stance": "warn", "quote": "This is not guaranteed to be memory safe.", "excerpt": "sudo-rs? This is not guaranteed to be memory safe. https://grep.app/search?f.repo=trifectatechfoundation%2Fsudo-rs&f.repo.pattern=sudo-rs&q=unsafe https://materialize.com/blog/rust-concurrency-bug-unbounded-channels/ Nor is it guaranteed to be secure. https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10 Is this website promoting Rust, memory unsafety and insecurity?", "context": "", "use_case": "", "switched_from": "", "story": "Memory Safety"}, {"id": 737517777, "item_id": 46094861, "url": "https://news.ycombinator.com/item?id=46094861", "by": "josephg", "date": "2025-11-30", "stance": "neutral", "quote": "For example, the recent sudo-rs rewrite.", "excerpt": "> There will never be a slow and careful rewrite in Rust. Nobody wants to do it Lots of people want to do it. Whether you want to run any of their code is an open question - but rewriting old things from scratch is a very popular passtime. In fact, people are already doing it. For example, the recent sudo-rs rewrite. Or the uutils coreutils package: https://github.com/uutils/coreutils - Which passes almost all confor", "context": "", "use_case": "", "switched_from": "", "story": "Ported freetype, fontconfig, harfbuzz, and graphite to Fil-C"}, {"id": 737449664, "item_id": 46090604, "url": "https://news.ycombinator.com/item?id=46090604", "by": "IshKebab", "date": "2025-11-29", "stance": "recommend", "quote": "", "excerpt": "> Zig is definitely not as safe as either Rust or Fil-C, since Zig doesn't have a great story for use after free. Have you considered making... Fil-Zig? Would it be easier to do because Zig is already fairly far ahead of C in terms of safety? > Rust is less safe than Fil-C in practice, because Rust code uses `unsafe` a lot (>100 uses of `unsafe` in uutils and sudo-rs, for example), and Rust code ends up depending on ", "context": "", "use_case": "", "switched_from": "", "story": "Ported freetype, fontconfig, harfbuzz, and graphite to Fil-C"}, {"id": 735094976, "item_id": 45943436, "url": "https://news.ycombinator.com/item?id=45943436", "by": "zerd", "date": "2025-11-15", "stance": "warn", "quote": "", "excerpt": "Even after 40 years of battle-hardening, it has had buffer overflow and double free vulnerabilities discovered recently, which Rust protects against. sudoedit one was pretty bad. https://www.sudo.ws/security/advisories/", "context": "", "use_case": "", "switched_from": "", "story": "Sudo-Rs Affected by Multiple Security Vulnerabilities"}, {"id": 734385488, "item_id": 45899093, "url": "https://news.ycombinator.com/item?id=45899093", "by": "thw_9a83c", "date": "2025-11-12", "stance": "neutral", "quote": "There is a link to github commit in the \"Notes\" section", "excerpt": "There is a link to github commit in the \"Notes\" section for each CVE [1]. [1]: https://security-tracker.debian.org/tracker/source-package/rust-sudo-rs", "context": "", "use_case": "", "switched_from": "", "story": "Security issues discovered in sudo-rs"}, {"id": 734375536, "item_id": 45898471, "url": "https://news.ycombinator.com/item?id=45898471", "by": "portmanteaufu", "date": "2025-11-12", "stance": "warn", "quote": "Two security issues were discovered in sudo-rs", "excerpt": "To save everyone a click, the text is: \"\"\" Two security issues were discovered in sudo-rs, a Rust-based implemention of sudo (and su), which could result in the local disclosure of partially typed passwords or an authentication bypass in some targetpw/rootpw configurations. For the stable distribution (trixie), this problem has been fixed in version 0.2.5-5+deb13u1. We recommend that you upgrade your rust-sudo-rs pac", "context": "", "use_case": "sudo replacement", "switched_from": "", "story": "Security issues discovered in sudo-rs"}, {"id": 734344560, "item_id": 45896535, "url": "https://news.ycombinator.com/item?id=45896535", "by": "porridgeraisin", "date": "2025-11-11", "stance": "warn", "quote": "effectively negating the intended behaviour of the targetpw or rootpw options.", "excerpt": "> access they shouldn't have It does, quotes from https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-q428-6v73-fc4q below: > A highly-privileged user (able to run commands as other users, or as root, through sudo) who knows one password of an account they are allowed to run commands as, would be able to run commands as any other account the policy permits them to run commands for, even if they", "context": "", "use_case": "", "switched_from": "", "story": "Multiple Security Issues in Rust-sudo-rs"}]}