← Back to context

Comment by vzaliva

17 hours ago

Theress a bug. That happens. Reporting it should take way less time than writing a sarcastic blog post ("I haven't filed a bug because we aren't Canonical's free debugging resource"). It's open source, so I think reporting bugs or submitting a PR is just good citizenship.

2 comments

vzaliva

Reply
throw0101d  14 hours ago

> Theress a bug. That happens.

It's not a bug, it's a deliberate incompatibility, as noted by the article's author:

>> Wildcards in command line arguments are not supported—using these in original versions of sudo was usually a sign of mis-configuration and consequently sudo-rs simply forbids using them. The only supported use is ‘’ as the final argument to indicate “zero or more subsequent arguments as noted above.*

> I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what you're allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesn't have and doesn't support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesn't).

If someone tries to do an in-place upgrade to Ubuntu 26.04, sudo-rs could potentially be installed instead of 'regular' sudo, and now you have a potentially system with borked functionality.

> It's open source, so I think reporting bugs or submitting a PR is just good citizenship.

LOL, the author's very next weblog post:

> One reaction to my entry on how the Rust Sudo is not fully compatible with proper Sudo is that I should have filed a bug report about this behavior. One of the reasons I have not done this comes down why I was using the Rust Sudo, and in my view it's a wider issue with bug reporting in general. To put it simply, I am (or was) an involuntary user of the Rust Sudo, not a voluntary one.

[…]

> In a project centered view, all people using Rust Sudo 'should' report issues to the project because that's how FOSS projects improve (this is not really true, the project unquestionably only wants what it considers 'good' bug reports and will be unhappy about ones that, for example, revisit decisions it has no intentions of changing). In the people centered view, many people have not chosen to use the new Rust Sudo or the Rust Coreutils, they've been stuck with them by Canonical's decisions. These people are under no obligation to help out with Canonical's apparent project of improving these projects (or help out the projects themselves); the Ubuntu project does not get to make everyone using Ubuntu into obligatory bug reporters through its own choices.

* https://utcc.utoronto.ca/~cks/space/blog/sysadmin/BugReports...