Testing the memory safe Rust implementation of Sudo/Su

• sudo-rs

  12 2,826 9.6 Rust

  A memory safe implementation of sudo and su.

  

The dependency list[0] looks pretty reasonable, AFAICT the overwhelming majority of that line-of-code count comes from autogenerated Windows API methods.

[0]: https://github.com/memorysafety/sudo-rs/blob/60985b2f5f7ffa8...

• OpenDoas

  29 595 0.0 C

  A portable fork of the OpenBSD `doas` command

If you want to move away from Sudo, but don't want to try this rust implementation just yet, I have had great success with OpenBSD's doas. It has been ported to every Linux distro I know of as well:

https://github.com/Duncaen/OpenDoas

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• doas

  29 725 4.6 C

  A port of OpenBSD's doas which runs on FreeBSD, Linux, NetBSD, and illumos

There's also a straight port of doas:

https://github.com/slicer69/doas/

However unlike sudo and opendoas this does not implement the persist feature on not-OpenBSD.

• Cargo

  264 11,958 10.0 Rust

  The Rust package manager

  

You're probably running into this: https://github.com/rust-lang/cargo/issues/7058

`cargo vendor` will download dependencies for all platforms, which leads to a lot of unused code being pulled in. In this case, the Windows API and Microsoft compiler wrappers.

In this instance, during the build process "tempfile" is used as a dev-dependency, which has a runtime dependency on windows-sys when compiling Windows binaries. I'm not entirely sure why (commenting it out in Cargo.toml doesn't seem to break the build).

After commenting it out and manually removing the spurious Windows API files as well as the unrelated packages (ctor diff output_vt100 pretty_assertions proc-macro2 quote syn unicode-ident yansi), I get the following results:

          0.0358 secs

• sudo

  47 1,089 9.5 C

  Utility to execute a command as another user

  

└───────────────────────────────────────────────────────────────────────────────────────┘

As a comparison, this is the output for https://github.com/sudo-project/sudo:

       0.0439 secs

• tempfile

  8 1,067 7.1 Rust

  Temporary file library for rust

The sudo-rs Cargo.toml [1] file seems very reasonable. This is the curse of being cross platform. The inclusion of https://github.com/Stebalien/tempfile as a dependency is responsible for the overwhelming majority of lines due to including *-sys crates for multiple OSs.

~/Code/tempfile !! tokei vendor

• sudo

  1 4 0.0 C

  Utility to execute a command as another user (by millert)

I'm not sure, I only see static analysis and fuzzing workflows in the CI on GitHub [1].

[1] https://github.com/millert/sudo/actions

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project