May 18, 2025, 4:42pm 1
sudo-rs is written in a memory safe language, but opendoas has a smaller codebase and has been around longer.
Which do you prefer? And which program do you think is a better option overall in regards to security?
1 Like
brivacy May 18, 2025, 7:36pm 2
original sudo is always better untill sudo rs become mainstream and doas and run0 both are good but many shell scripts are for sudo so sudo can only be replaced with sudo-rs due to drop in replacement compatibility. but just because ubuntu is swtching i have already using sudo-rs in my fedora to test though it is in rust. if you want security run0 is the most secure by design. but sudo-rs is good but not awesome because it was designed to be sudo replacement so issu…
May 18, 2025, 4:42pm 1
sudo-rs is written in a memory safe language, but opendoas has a smaller codebase and has been around longer.
Which do you prefer? And which program do you think is a better option overall in regards to security?
1 Like
brivacy May 18, 2025, 7:36pm 2
original sudo is always better untill sudo rs become mainstream and doas and run0 both are good but many shell scripts are for sudo so sudo can only be replaced with sudo-rs due to drop in replacement compatibility. but just because ubuntu is swtching i have already using sudo-rs in my fedora to test though it is in rust. if you want security run0 is the most secure by design. but sudo-rs is good but not awesome because it was designed to be sudo replacement so issues sudo have same with sudo rs just less memory based bugs. for doas it was not made for linux and it does not offer supper compatibility with linux but due to small really small code base this is easy to fix bugs for that.
1 Like
I personally have started using sudo-rs. I have a NixOS device, which as a pretty handy option to replace sudo with sudo-rs system wide. I have also aliased it on my shell in my main device.
For my use-case, it seems like the right choice. OpenDoas does have the benefit of having a smaller codebase, but has seen little activity in commits these past 3 years (latest release was in 2022). This makes me feel more comfortable using sudo-rs, which has not only the support of Canonical now, but also the maintainer for sudo for the past 30 years, Todd Miller (as mentioned here). It aims to be pretty much a drop-in replacement except in very edge cases, but since it’s still in active development, your mileage may vary. 
2 Likes
1 Like
anonymous261 (anonymous261) May 23, 2025, 9:50pm 5
I came across this: RootAsRole, it seems like it delegates certain powerful priviledges when you call it rather than giving complete priviledges over everything, and it takes some aspects from sudo-rs
Here’s a comparison table
So basically sudo-rs seems to be the largest, maintained, modern alternative to sudo, while RootAsRole and run0-sudo-shim are interesting spins on a super command and time will tell if they are able to compete with sudo-rs. OpenDoas unfortunately seems out of the question.
2 Likes
naibed November 7, 2025, 8:15am 6
Made the switch on my devices/servers today since it’s been in the news again.