Ubuntu 26.04 switches default sudo to Rust-based sudo-rs, raising compatibility risks
Ubuntu 26.04 LTS makes sudo-rs, a Rust rewrite, the default sudo implementation instead of the traditional sudo.ws version. Most users will notice no difference, but scripts, Ansible playbooks, custom sudoers files, or CI pipelines relying on less common flags or options could fail silently. sudo-rs deliberately omits some features, including plugin support, LDAP-stored sudoers, and several Defaults such as mail and logging options. Unrecognized directives may either cause parse errors that lock out root access or be ignored, leaving intended policies inactive. The article recommends inventorying all sudo usage, testing on an ubuntu:26.04 container, and rolling out gradually, with update-alternatives offering a temporary fallback.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in