[Bug 2080988] [NEW] Consideration for implementing Python plugin support for "sudo"

[Adam Vest]

Public bug reported:

Hello!

I'm opening this LP to begin the discussion for consideration of
implementing the Python Plugin API (documented here[1]) into our sudo
package. We have received requests for this from some customers, and
other distros (RHEL[2], namely, apparently as of 9.x) have implemented
this. The lack of inclusion on our end has presented itself as a
migration blocker for some.

This has yet to be implemented upstream, with extensive discussion going
back a few years found here[3], though stalling out March 2022.

I recognize this would represent (potentially significant) security
concerns, though given the above, I believe it would be worthwhile to
consider implementing this in future releases.

Thanks for your time and consideration!

[1] https://www.sudo.ws/docs/man/1.9.0/sudo_plugin_python.man/
[2] https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/considerations_in_adopting_rhel_9/index#new-packages_assembly_changes-to-packages
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990855

** Affects: sudo (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/2080988

Title:
  Consideration for implementing Python plugin support for "sudo"

Status in sudo package in Ubuntu:
  New

Bug description:
  Hello!

  I'm opening this LP to begin the discussion for consideration of
  implementing the Python Plugin API (documented here[1]) into our sudo
  package. We have received requests for this from some customers, and
  other distros (RHEL[2], namely, apparently as of 9.x) have implemented
  this. The lack of inclusion on our end has presented itself as a
  migration blocker for some.

  This has yet to be implemented upstream, with extensive discussion
  going back a few years found here[3], though stalling out March 2022.

  I recognize this would represent (potentially significant) security
  concerns, though given the above, I believe it would be worthwhile to
  consider implementing this in future releases.

  Thanks for your time and consideration!

  [1] https://www.sudo.ws/docs/man/1.9.0/sudo_plugin_python.man/
  [2] https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/considerations_in_adopting_rhel_9/index#new-packages_assembly_changes-to-packages
  [3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990855

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2080988/+subscriptions