microsoft / sudo

It's sudo, for Windows
MIT License
4.97k stars 126 forks source link

Feature request: Support for Windows 10 #2

Open zadjii-msft opened 7 months ago

zadjii-msft commented 7 months ago

We should backport Sudo to Windows 10. Ultimately, this shouldn't be too hard, but porting the settings app changes may be a bit of a pain.

This is internally, MSFT:48735673

Jevil7452 commented 7 months ago

Sudo just runs on Windows 10. Configuration can be done via the command line tool itself. image So, that should clear up the first part of the problem. But I guess you would like to have a friendly config UI for it.

zadjii-msft commented 7 months ago

Yep! sudo.exe doesn't do anything Windows 11-specific. The Settings app changes are the hardest part (since there was a pretty massive UI rejuv between 10 and 11).

zadjii-msft commented 7 months ago

When we get this backported to the Windows 10 branches, you can make sure we'll post here 😄

gerardog commented 7 months ago

I see sudo.exe is (currently) portable and works on Windows 10. So why ship it with windows? Why not ship it as a Winget package?

zadjii-msft commented 7 months ago

Why not ship it as a Winget package?

That's certainly something to look at going forward. I'd want to make sure that the GPO stuff we have in-box with the OS is also something that could be delivered via winget. Otherwise, we'd have to consider the scenario where someone can install sudo, but then there's no way to manage it from an organization's standpoint. Something for us to work out in the coming months ☺️

rbarbrow commented 2 months ago

Any update on the winget front?

zadjii-msft commented 2 months ago

Okay I definitely get that it's valuable - but I'm gonna go ahead and delete links to 3p builds of sudo. Sorry, I just think it's a terrible idea to have folks downloading builds from potentially untrusted third parties. Seems like a recipe for a supply chain vulnerability.

I'm back from vacation this week[^1]. Getting officially signed installers up on our releases page and winget is my priority this month.

[^1]: though, it's a pair of short weeks for me. So, things will be a bit slower than usual

zadjii-msft commented 2 months ago

IMO: Doesn't matter if it's not changed now. In the wake of the xz thing, I'm not gonna have folks take any chances on untrusted third-parties. Even ones that are well intended now may well later become compromised.

Neustradamus commented 1 month ago

It will be nice to have for Windows 10 and Windows Server too.