Comment by throw0101c

3 hours ago

> Sudoers glob expressions are a horrible footgun and I have little empathy for anyone complaining about their removal […]

Except sudo-rs did not remove them.

As the article points out when it comes to regexes, the following is not allowed:

    /usr/sbin/exim -bp[acru]

but the following would be:

    /usr/sbin/exim *

As the author notes:

>> Wildcards in command line arguments are not supported—using these in original versions of sudo was usually a sign of mis-configuration and consequently sudo-rs simply forbids using them. The only supported use is ‘’ as the final argument to indicate “zero or more subsequent arguments as noted above.*

> The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what you're allowing […]