![\"sudo](\"https:\/\/itsfoss.com\/content\/images\/2025\/09\/sudo-rs.png\")
<\/p>\n<\/p>\n
The upcoming Ubuntu 25.10 release features<\/a> a controversial move to replace the classic sudo command with its Rust-based implementation, sudo-rs.<\/p>\n This move could bring numerous questions for you. Like, why opt for this change? What’s wrong with the original? How would you use this new sudo? What happens to the old one?<\/p>\n I will answer all these questions in this article.<\/p>\n sudo-rs<\/a> is an implementation of the classic sudo and su written in the Rust programming language, which is known for its memory safety. The new sudo-rs is not 100% compatible with sudo as it drops some features and implements a few of its own. This new tool is under heavy development and may implement some of the missing sudo features.<\/p>\n Don’t fix what’s not broken, right? Perhaps not. Ubuntu developer discussion cited<\/a> these primary reasons for going with the Rust-based sudo:<\/p>\n Basically, the 30-years old codebase of sudo is complicated and makes it difficult to patch or implement new features. Writing from scratch is easier and the use of a modern, memory-safe language will also help attract contributions from a borader pool of developers.<\/p>\n Please note that the sudo-rs dev team is in touch with the original maintainer of the original sudo and they have found issues that were not only fixed in the new Rust-based sudo but also in the original sudo.<\/p>\n So from what it seems, sudo-rs is the natural evolution over the classic sudo.<\/p>\n Not much for regular end user perspective. You’ll still be typing For sysadmin and advanced users, there are a few things missing for now and some might not be implemented at all. For example, sudo-rs will not include the sendmail support of original sudo which was used for sending notifications about sudo usage.<\/p>\n sudo-rs<\/a> always uses PAM for authentication and thus your system must be set up for PAM. sudo-rs will use the Wildcards are not supported in argument positions for a command to prevent common configuration mistakes in the sudoers file.<\/p>\n In Ubuntu 25.10, the command sudo is softlinked to sudo-rs. So, you’ll be using sudo as always but underneath, it will be running the new sudo-rs.<\/p>\n The original sudo is still there in the system as If you want to use the OG sudo, you can just replace sudo with sudo-ws.<\/p>\n As stated above, there are hardly any differences visible for regular users except for the slightly changed error and warning messages.<\/p>\n At least till Ubuntu 26.10, you can make the classic sudo the default sudo by updating the alternatives. Although I would advise against it. Unless you have a solid reason, there is no harm in using the Rust-based sudo. Clearly, this is what will be the future anyways.<\/p>\n Surprised? There are several alternatives to sudo<\/a> that have been in existence for some years now.<\/p>\n There is this doas<\/a> command-line tool that can be considered a simplified, minimal version of sudo. <\/p>\n Another Rust-based implementation of sudo like functionality is RootAsRole<\/a>.<\/p>\n Some may even count uid0 from systemd<\/a> as an alternative to sudo although it’s not in the same league in my opinion but serves a similar purpose.<\/p>\n\n\ud83d\udcdd<\/div>\nTLDR<\/strong><\/b>;
If you are a regular, end-user who uses sudo to run commands with root privileges, nothing changes for you at the surface, except for some error and warning messages. You’ll continue using sudo as you did before and it will automatically use Rust-based sudo underneath. However, if you are a sysadmin with custom sudo configuration, you should start paying attention as some features have been changed.<\/div>\n<\/div>\nWhat is sudo-rs?<\/h2>\n
Why sudo-rs?<\/strong><\/h2>\n
\n
What changes between sudo and sudo-rs?<\/h2>\n
sudo<\/code> as usual while it runs sudo-rs in the background. Some warning or error messages may have different text but that’s about it.<\/p>\nsudo<\/code> and sudo-i<\/code> service configuration. meaning that resource limits, umasks, etc have to be configured via PAM and not through the sudoers file.<\/p>\nUsing sudo or sudo-rs in Ubuntu<\/h2>\n
![\"sudo](\"https:\/\/itsfoss.com\/content\/images\/2025\/09\/sudo-rs-ubuntu.png\")
<\/figure>\nsudo-ws<\/code>. It resembles the official website sudo.ws<\/a> of the classic sudo project.<\/p>\n![\"sudo](\"https:\/\/itsfoss.com\/content\/images\/2025\/09\/sudo-vs-sudo-rs.png\")
<\/figure>\nsudo update-alternatives --config sudo<\/code><\/pre>\n\n\ud83d\udca1<\/div>\nsudo-rs is available in universe repository starting with Ubuntu 24.04. If you want to test it, you can type sudo-rs<\/code> instead of sudo<\/code> in your commands. Other distributions may also have this package available.<\/div>\n<\/div>\nsudo-rs is not the only alternative to sudo<\/h2>\n