Comment by throw0101c

5 hours ago

> So sudo.rs drops some features because "less is more", but it's still called "sudo" because by working together with the original maintainer they capture the spirit of the original, a "sudo 2.0" so to speak.

Except when the change of features are seemingly arbitrary. As the article points out when it comes to regexes, the following is not allowed:

    /usr/sbin/exim -bp[acru]

but the following would be

    /usr/sbin/exim *

So, as the author notes:

> The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what you're allowing […]