sudo-rs icon indicating copy to clipboard operation
sudo-rs copied to clipboard

A memory safe implementation of sudo and su.

Results 189 sudo-rs issues
Sort by recently updated
recently updated
newest added
trafficstars

- [ ] CLI interface - [ ] combine the right crates (PAm, exec, ..) The sudoers permissions checker is of course replaced with a simple checker to see if...

- [x] `sudo -g ghosts` where the target group does not exist. [relevant test](https://github.com/memorysafety/sudo-rs/blob/2a8078800fac8513fedbbff1a33cf62008af6637/test-framework/sudo-compliance-tests/src/flag_group.rs#L118) - ogsudo: `sudo: unknown group: ghosts` - sudo-rs: `Error: GroupNotFound("ghosts")` - [x] `sudo -u ghost` where...

non-compliant

Original sudo has a custom password prompt. It is user friendly to have that. Now most of what we print there is provided by PAM (e.g. `Password:`, or `Yubikey PIN:`)....

enhancement
C-pam

From sudo man page: ``` When used without a command, invalidates the user's cached credentials. In other words, the next time sudo is run a password will be required. This...

This is in the Ubuntu/Debian configuration; note there are some related Defaults options that come with this (see the manpage of sudo)

Right now we are assuming that several entities are valid Rust strings. The list of such entities includes but it is not restricted to: - user names, passwords, home directory,...

C-operatingsystem
C-pam
C-exec

I'm just opening this issue to keep track of it in case it happens again. CI was running for #212 and a test that shouldn't be affected by the changes...

CI

For information about Ploutos see https://github.com/NLnetLabs/ploutos. For an example successful run of the workflow contained in this PR see https://github.com/ximon18/sudo-rs/actions/runs/4375927878. To do: - The `test-sudo-rs.sh` test script should probably do...

currently compliance tests that require password authentication use pass the `-S` flag to sudo so that the password can be piped via stdin. we also want to support password input...

investigate

relevant test https://github.com/memorysafety/sudo-rs/blob/ba0ba119ef1a5f2a83cb2e14aae3626b12facbed/test-framework/sudo-compliance-tests/src/cli.rs#L75-L92 this diverges from the original sudo which parses `sudo -u=root true` as `sudo -u =root true` however, both sudo implementations parse `sudo -uroot true` as `sudo -u...

non-compliant