On personal devices I prefer run0, but idk if it can handle complex configurations yet
I’m getting 403’d, so I can’t read it, but sudo-rs is not compatible with the original sudo by design because they are intentionally omitting insecure options. The original creature of sudo supports the Rust rewrite.
The article argues it has also made a more insecure design choice then it comes to patterns/wildcards in sudoers-files
The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what you’re allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesn’t have and doesn’t support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesn’t).
