Yesterday, I setup Ubuntu 26.04 for using it with the RTX A4000 GPU (I have the impression that Ubuntu is a first-class citizen for machine learning stuff with Nvidia). Today, I spent far too much time to find out why my FreeIPA provisioned account can't `sudo` on this machine.

It's `sudo-rs`. `sudo-rs` can't really sssd, nss or pam or whatever it is that usually tells `sudo` that a user is allowed to `sudo`.

Solution? `sudo update-alternatives --config sudo` and then select the not-`sudo-rs`. (`sudo.ws`).

That's why I usually don't use Ubuntu anymore. Premature usage of immature software.

#sudors #ubuntu

Ubuntu 26.04 Security Shift

https://beitmenotyou.online/ubuntu-26-04-security-shift/

What do you think about sudo-rs making feedback for entering password the default?

#sudo #linux #sudors #rustlang #pool

💬 sudo-rs Changes Default Password Prompt Behavior

｢ Now, when users type their password during authentication, the terminal displays asterisks (*) instead of staying visually silent. The sudo-rs maintainers describe the change as a usability improvement ｣

#sudors #sudo #rust #opensource
https://linuxiac.com/sudo-rs-changes-default-password-prompt-behavior/

I was reading some discussion on the sudo-rs now showing asterisks.

I don't hate that it does. I don't find that the rational to keep the typing hidden is really that strong. It reads like making a case for security by obscurity. Something which we all in the #foss world would already agree is a flaw.

Most traditions outlive their usefulness and assumptions that made them. Maybe this says we need more than just long passwords in systems that use sudo.

#sudo_rs #sudors #sudo #linux #security

in light of the recent sudo-rs vulnerabilities, what are your opinions about the adoption of sudo-rs in ubuntu?

boosts appreciated

#sudo #sudors #ubuntu #rust

FYI: The sudo-rs bug of leaking passwords on timeout is a general problem of line buffered stdin streams.

The `read` builtin suffers from the same problem.

https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-c978-wq47-pvvw

#sudors #sudo_rs #bash #CVE_2025_64170 #infosec

"sudo-rs Affected By Multiple Security Vulnerabilities - Impacting Ubuntu 25.10"

https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10

#security #infosec #ubuntu #sudors

Phát hiện 2 vấn đề bảo mật trong sudo-rs, phiên bản Rust của sudo #sudo #sudors #bảo mật #security #Rust #lỗihổngbảomật #vấnđềbảomật

https://www.reddit.com/r/programming/comments/1ov39fq/two_security_issues_were_discovered_in_sudors_a/