Ubuntu 26.04 Rust sudo ignores sudoers.d rules

utcc.utoronto.ca3 min read

The author discovers that the Rust-based sudo implementation in Ubuntu 26.04 breaks compatibility with standard sudo by ignoring certain /etc/sudoers.d file rules and failing to support wildcard command-line arguments. The author argues that sudo-rs handles wildcards inconsistently and provides misleading, opaque documentation that creates hidden traps for system administrators. Open article →

Notable comments

Reception focused on compatibility breakage and migration pain (sudoers parsing, env/wildcards/flags), with some commenters emphasizing that sudo-rs explicitly doesn’t aim for full sudo feature parity—so expectations and transition strategy are the real battleground.

LOBSTERS · dvogel Calls out a specific transition failure: sudo-rs breaks on `requiretty` and even more on `!requiretty` instead of parsing/ignoring it with a warning, turning a “not really dependable” option into an outage hazard.

LOBSTERS · mort First-hand admin gripe: removal of `-E` breaks a common workflow for launching GUI apps as root (preserving DISPLAY-related env vars) and the commenter can’t find a clear replacement.

LOBSTERS · ekuber Provides concrete upstream reference from sudo-rs docs: it limits wildcard support to argument positions for the final command argument (and cites the exact policy text), explaining why sudoers wildcard behavior can diverge.

More on this topic