search

trifectatechfoundation / sudo-rs

A memory safe implementation of sudo and su.
Other
2.88k stars 77 forks source link

sudo: CLI validation is lax #787

Closed japaric closed 10 months ago

japaric commented 11 months ago

relevant test

https://github.com/memorysafety/sudo-rs/blob/b340a3b1fde8125363067b22a2936e5a7814abef/test-framework/sudo-compliance-tests/src/sudo/cli.rs#L142-L154

sudo-rs accepts sudo --remove-timestamp -u root. ogsudo rejects that command-line invocation