sudo-project/sudo on Hacker News

…2010 to February 2024, it was sponsored by Quest Software according to the history page[2]. [1] https://github.com/sudo-project/sudo/blob/main/LICENSE.md [2] https://www.sudo.ws/about/history/

comment by omoikane · 2026-02-02 · in Todd C. Miller – Sudo maintainer for over 30 years

I thought this is about the other warning, which has since been removed: https://github.com/sudo-project/sudo/commit/6aa320c96a376136...

comment by alwayslikethis · 2024-12-02 · in When was the famous "sudo warning" introduced? (2019)

Looking at the example of sudo it seems there are still plenty of regular and recent commits. https://github.com/sudo-project/sudo/commits/main/

comment by wiercin · 2024-09-09 · in Which open-source projects are widely used but maintained by just a few people?

…and some useful ones (e.g. HOME) are initialized by sudo, but I can't tell where that's done. [1]: https://github.com/sudo-project/sudo/blob/ef52db46f9b375d7ff...

comment by mid-kid · 2024-05-01 · in Run0, a systemd based alternative to sudo, announced

…many (not all) distros. I remember having to install it from repos in the past on a new system: https://github.com/sudo-project/sudo

comment by ErikBjare · 2024-05-01 · in Run0, a systemd based alternative to sudo, announced

…C 1478 165173 37638 584876 C/C++ Header 1083 15580 22432 59692 diath@11km :: /tmp » git clone https://github.com/sudo-project/sudo diath@11km :: /tmp » cloc --match-f="(c|h)" sudo/{src,include} C 41 2104 3359 16384 C/C++ Header 36 797 2159…

comment by diath · 2024-05-01 · in Run0, a systemd based alternative to sudo, announced

Just a side note: sudo is largely maintained by just one dude https://github.com/sudo-project/sudo/graphs/contributors

comment by udev4096 · 2024-05-01 · in Run0, a systemd based alternative to sudo, announced

Side note that I've always found interesting: sudo is almost entirely maintained by one dude: https://github.com/sudo-project/sudo/graphs/contributors

comment by jimt1234 · 2024-02-09 · in Sudo for Windows

The n=2 case also occurs in the commit: https://github.com/sudo-project/sudo/commit/7873f8334c8d3103... And indeed, the two values ate bitwise complements.

comment by tomsmeding · 2024-01-28 · in Try to make sudo less vulnerable to Rowhammer attacks

Huh, it took 6 years for the joke to get added: https://github.com/sudo-project/sudo/commit/c1d6e86d67aa60d7...

comment by kelnos · 2023-11-06 · in The first stable release of a memory safe sudo implementation

One feature they didn't mention they left out was the ability to run `make me a sandwich` ( https://github.com/sudo-project/sudo/blob/main/Makefile.in#L... )

comment by gary_0 · 2023-11-06 · in The first stable release of a memory safe sudo implementation

…────────────────────────────────────────────────────────────┘ As a comparison, this is the output for https://github.com/sudo-project/sudo : 0.0439 secs ┌──────────────────────────────────────────────────────────────────────────────────────…

comment by jeroenhd · 2023-06-28 · in Testing the memory safe Rust implementation of Sudo/Su

This change was partly reverted in https://github.com/sudo-project/sudo/commit/9757d29a24ac1872... TL;DR: Only display the warning if sudo is configured to send emails.

comment by KETpXDDzR · 2023-04-30 · in Remove “This incident will be reported.” from user warnings

Actually it's been brought back. https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

comment by politelemon · 2023-04-30 · in Remove “This incident will be reported.” from user warnings

The message was actually re-added (in modified, clearer form) in a subsequent commit: https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

comment by Reason077 · 2023-04-30 · in Remove “This incident will be reported.” from user warnings

…seems to have two contributors outside Todd Miller which committed more than a handful of lines: https://github.com/sudo-project/sudo/graphs/contributors It's the kind of infrastructure project that doesn't really attract much interest, I…

comment by formerly_proven · 2023-04-29 · in sudo and su Being Rewritten in Rust for Memory Safety

…wording updated and now dependent on if you have actually set up the mailer to report it somewhere https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

comment by forgotusername6 · 2023-04-29 · in Remove “This incident will be reported.” from user warnings

As it happens - "The warning was restored in a slightly altered form in 9757d29" ( https://github.com/sudo-project/sudo/commit/9757d29a24ac1872... ) - Millert.

comment by ibic · 2023-04-29 · in Remove “This incident will be reported.” from user warnings

This is correct, and was added back a few weeks later in https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

comment by bo0tzz · 2023-04-29 · in Remove “This incident will be reported.” from user warnings

The warning is added back here: https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

comment by simse · 2023-04-29 · in Remove “This incident will be reported.” from user warnings

The fix: https://github.com/sudo-project/sudo/commit/0274a4f3b403162a...

comment by orf · 2023-01-20 · in Sudoedit can edit arbitrary files

…to forbid "--". I don't really see how any language choice could help you with this. [1]: https://github.com/sudo-project/sudo/commit/0274a4f3b403162a...

comment by arp242 · 2023-01-19 · in Sudoedit can edit arbitrary files

sudo 1.8.0 was released in Feb 2011: https://github.com/sudo-project/sudo/commit/SUDO_1_8_0

comment by jwilk · 2023-01-19 · in Sudoedit can edit arbitrary files

> No, the code overwrote the 9th byte of the buffer to add a null terminator: https://github.com/sudo-project/sudo/commit/bd209b9f16fcd127 ... Ah that makes a lot more sense. > So it's not just reading past the end of the buffer, but it's…

comment by _kbh_ · 2022-11-05 · in Sudo: Heap-based overflow with small passwords

To put the relative simplicity into perspective, here is the official Github mirror of sudo: https://github.com/sudo-project/sudo On the contributors tab: https://github.com/sudo-project/sudo/graphs/contributors We can see that sudo has…

comment by Veserv · 2022-11-04 · in Sudo: Heap-based overflow with small passwords

No, the code overwrote the 9th byte of the buffer to add a null terminator: https://github.com/sudo-project/sudo/commit/bd209b9f16fcd127... So it's not just reading past the end of the buffer, but it's overwriting a single byte potentially…

comment by TonyTrapp · 2022-11-04 · in Sudo: Heap-based overflow with small passwords

Fixed upstream here: https://github.com/sudo-project/sudo/commit/bd209b9f16fcd127...

comment by erk__ · 2022-11-04 · in Sudo: Heap-based overflow with small passwords

Indeed: https://github.com/sudo-project/sudo/blob/SUDO_1_9_9/plugins... But this particular message was removed in sudo 1.9.10: https://github.com/sudo-project/sudo/commit/6aa320c96a376136

comment by jwilk · 2022-08-09 · in From novice to master, and back again (2013)

…different standards on less important things. [1] https://news.ycombinator.com/item?id=25919235 [2] https://github.com/sudo-project/sudo/graphs/contributors [3] https://xkcd.com/2347/ [4] https://xkcd.com/2030/

comment by Veserv · 2021-12-01 · in This shouldn't have happened: A vulnerability postmortem

Looking for a patch/package for Cent6, otherwise will have to try to compile it I guess. UPDATE: https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_5... UPDATE AGAIN: https://www.sudo.ws/download.html#binary

comment by the_solenoid · 2021-01-27 · in New Linux SUDO flaw lets local users gain root privileges

We’d all like that, true, but look here: https://github.com/sudo-project/sudo/graphs/contributors That’s one maintainer, not even full time according to his résumé. What you just described is multiple specialists and some supporting tools,…

comment by acdha · 2021-01-27 · in Heap-based buffer overflow in Sudo

The actual commit: https://github.com/sudo-project/sudo/commit/8255ed69

comment by statquontrarian · 2021-01-27 · in Heap-based buffer overflow in Sudo

…the sudo bad environment variable list[1], which I recently found a 15 year old typo in.[2] [1]: https://github.com/sudo-project/sudo/blob/master/plugins/sud... [2]: https://www.sudo.ws/repos/sudo/rev/bdf9c9e7f455

comment by awirth · 2020-07-14 · in Hacking with environment variables

FWIW, sudo uses Mercurial, not git. https://github.com/sudo-project/sudo is just a mirror.

comment by jwilk · 2020-02-03 · in Buffer overflow when pwfeedback is set in sudoers

Best part is the fix: https://github.com/sudo-project/sudo/commit/b5d2010b6514ff45... Time to delete sudo.

comment by stefan_ · 2020-02-02 · in Buffer overflow when pwfeedback is set in sudoers