Discussion
RE: https://mastodon.social/@cks/117547904775599551
if you rewrite software in rust and then deviate from how that software behaves -- you haven't actually rewritten the software in rust, you've just made an incompatible clone.
(the real security problems with sudo are related to the combinatorial complexity of the config format anyway)
@ariadne they should have rewritten doas instead.
@ariadne the config file format's not even... good. sticking to it just feels like buying problems when you could have designed something better
> the real security problems with sudo are related to the combinatorial complexity of the config format anyway
thats *why* they made incompatible changes with real sudo
@fossdd great! stop calling it "sudo rewritten in rust" then, because it isn't.
@ariadne Happened with /usr/bin/install as well. Screwed up a package install because the permission syntax differed slightly. Why rewrite something that's endlessly used (and hence demands letter-perfect adherence to the spec), has no known security problems and is absolutely fast enough?