sudo-rs icon indicating copy to clipboard operation
sudo-rs copied to clipboard

Remove clap as a dependency

Open marlonbaeten opened this issue 2 years ago • 0 comments

Although clap is an excellent crate, it is not intended for use with a setuid program. The size of clap adds an unreasonable burden of reviewing it and its dependencies from the security perspective of a setuid program. Also, to be compliant of how sudo processes arguments, we need some custom parsing logic. Therefore, the advantages of using clap do not outweigh the disadvantages in our case.

marlonbaeten avatar May 09 '23 15:05 marlonbaeten