trifectatechfoundation / sudo-rs

A memory safe implementation of sudo and su.
Other
2.88k stars 77 forks source link

Refactor `SysLog` #858

Closed squell closed 1 week ago

squell commented 3 weeks ago

Issues #809, #824 and #856 have all hit the same spot. Which is the same spot that gave rise to the infamous vudo in original sudo (CVE 2001-0279). Luckily in safe Rust, the problems are contained to panic and hangs, but still: if you have metal pole in your garden where lightning has struck three times, it's probably wise to reconsider the pole.

This PR disects and rewrites the old syslog code in a commit-by-commit basis. Enjoy.