Many Lung Cancers Are Now in Nonsmokers. Scientists Want to Know Why.
Read more of this story at Slashdot.
Fortifying Ubuntu’s Root with sudo‑rs: How Rust Reinforces Privilege Escalation
Privilege escalation in Linux has always walked a tightrope between convenience and risk. sudo allows users to perform tasks as root without sharing the root password—intuitive, powerful—but also a high-value target for exploits rooted in memory safety bugs. Ubuntu is now pioneering a transition: replacing the traditional C-based sudo with sudo‑rs, a Rust-powered rewrite engineered for safer root handling.
Understanding sudo‑rsBuilt under the Trifecta Tech Foundation’s “Privilege Boundary” initiative, sudo‑rs is a from-scratch implementation of sudo and su created in Rust, a language celebrated for its compile-time guarantees against memory mishaps. Designed to behave like the classic “sudo,” it supports user prompts, permission checks, and environment handling, but keeps underlying behavior Turing-equivalent.
Why Ubuntu Is Betting on RustRust’s strict approach to memory usage eradicates whole classes of vulnerabilities—like buffer overflows and use-after-free—that have long plagued system tools. For a utility as privileged as sudo, these protections offer exponentially greater security value. Ubuntu’s strategy, dubbed “Carefully But Purposefully Oxidising Ubuntu,” is a methodical shift toward memory-safe tooling.
Transitioning in Ubuntu 25.10 and BeyondCanonical has announced that Ubuntu 25.10 (“Questing Quokka”), scheduled for October 9, 2025, will ship sudo‑rs as the default /usr/bin/sudo. This serves as a proving ground ahead of Ubuntu 26.04 LTS (April 2026). Regular users will find no change—commands, flags, and password prompts remain familiar—while Ubuntu monitors real-world feedback.
Ensuring CompatibilityTo deliver a smooth switch, Canonical is funding “Milestone 5” development in sudo‑rs to implement:
-
NOEXEC for shell escape control,
-
AppArmor integration,
-
sudoedit,
-
Support for kernels older than 5.9 (critical for Ubuntu 20.04 containers).
A “less‑is‑more” philosophy guides, meaning legacy niche features—like LDAP-based sudoers—might remain absent. But, for most workflows, sudo‑rs should cover every essential feature.
Coexistence and RollbackUbuntu’s old sudo will still be available in the repositories and can be reselected via the alternatives system. Users needing features not yet ported to sudo‑rs can effortlessly revert.
Go to Full ArticleIconic fashion brand set to open first ever stand-alone store in Essex
Gangster granny drug lord smuggled £80m of drugs through Harwich Port
Iconic fashion brand set to open first ever stand-alone store in Essex
Witham office space could change to nursery for children as plans submitted
Woman, 86, arrested after reports human remains were buried at home in the 1970s
BrewDog announces closure of 10 bars as it heads to pre-tax loss - is YOUR local safe?
Here come the WAGs and HABs! Lionesses partners and fans flock to Switzerland ahead of Euro Italy semi-final - and get on the airport beers
Ian Wright 'to make ITV comeback' for Lionesses Euro semi-final against Italy tonight in his first women's game since Eni Aluko accused legend of 'blocking' female pundits
Sarah Lancashire is joined by proud husband Peter Salmon at Windsor Castle as BAFTA-winner is awarded the CBE from Princess Anne for services to drama
Eamonn Holmes 'takes brutal swipe at ex-wife Ruth Langsford' as he gushes over new love Katie Alexander
Ex City worker, 56, who 'dreamt of being like James Bond' is found guilty of trying to spy for Russia after handing over information on Grant Shapps to undercover MI5 officers
Jason Statham, 57, shows off his incredible diving skills during family holiday in the Mediterranean - 35 years after representing England at the Commonwealth Games
Humans can be tracked with unique 'fingerprint' based on how their bodies block Wi-Fi signals
Researchers in Italy have developed a way to create a biometric identifier for people based on the way the human body interferes with Wi-Fi signal propagation.…
UK government swoons over OpenAI in legally meaningless love-in
The UK's Department for Science, Innovation & Technology (DSIT) is jumping into bed with chatbot biz OpenAI, signing a memorandum of understanding to expand OpenAI's footprint in the nation while inserting its tech firmly into the public sector.…
Banks View Heavy 'Buy Now, Pay Later' Use as Red Flag for Loan Approvals
Read more of this story at Slashdot.