Ubuntu 26.04's Rust sudo isn't compatible with standard sudo

lemire · x · 2026-11-04

Daniel Lemire shares a blog post showing Ubuntu 26.04's Rust sudo (sudo-rs) is not a drop-in replacement: it ignores /etc/sudoers.d files with no logging, and a long-standing NOPASSWD wildcard rule (exim -bpa/-bpc/...) gets interpreted literally as "-bp[acru]" and fails.

The sudo-rs manual confirms wildcards are deliberately unsupported — only a trailing is allowed — which the author calls keeping the most dangerous wildcard while banning the precise ones. The author has disabled Rust Sudo and Rust coreutils on all their Ubuntu 26.04 machines, declined to file a bug with Canonical, and expresses distrust of Canonical's push to replace mature GPL'd C programs with non-GPL'd Rust rewrites.

Original post →

More from coding & agent

coding & agent channel →