[Bug 2143125] Re: Merge from upstream "Add error messages on wildcards and accept a 'final' wildcard #1463"

[Simon Johnsson]

Hey there pabouk! Thanks for the bug report.

I think you make a good case for this feature, as this is indeed an LTS.
Due to the size of the pull request, I would however prefer to wait
until the next release of sudo-rs is out and get that landed in Ubuntu
instead. If that comes out later than expected I think we could start
making the case for getting this cherry-picked.

All the best,
Simon

** Changed in: rust-sudo-rs (Ubuntu)
       Status: New => Triaged

** Changed in: rust-sudo-rs (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rust-sudo-rs in Ubuntu.
https://bugs.launchpad.net/bugs/2143125

Title:
  Merge from upstream "Add error messages on wildcards and accept a
  'final' wildcard #1463"

Status in rust-sudo-rs package in Ubuntu:
  Triaged

Bug description:
  Change from the classic sudo to sudo-rs have some negative
  consequences.

  One of them is the missing support for wildcards in commands which can
  negatively impact security by forcing administrators to allow much
  more command variants than needed (especially when the command has
  sub-commands like apt, systemctl etc.)

  Two weeks ago the upstream merged pull request allowing a wildcard as
  the final argument in command specification:
  https://github.com/trifectatechfoundation/sudo-rs/pull/1463

  As we are talking about LTS version which can impact security habits
  of administrators for years, I think it is very important to include
  the support for wildcards. Please consider including it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-sudo-rs/+bug/2143125/+subscriptions