back to article Sudo maintainer, handling utility for more than 30 years, is looking for support

It's hard to imagine something as fundamental to computing as the sudo command becoming abandonware, yet here we are: its solitary maintainer is asking for help to keep the project alive. It's a common trope in the open-source computing community that a small number of solitary maintainers do a disproportionate amount of work …

  1. IGotOut Silver badge

    Remind me...

    ....which Tech companies using this have record stock prices?

    Oh yeah all of the greedy parasitic scumbags.

    1. Jou (Mxyzptlk) Silver badge

      Re: Remind me...

      Those who threaten with the most expensive lawyers against individuals for a tool they never even paid a penny for.

      1. Excused Boots Silver badge

        Re: Remind me...

        "Those who threaten with the most expensive lawyers against individuals for a tool they never even paid a penny for.”

        Yes I do get what you are hinting at, but I believe it’s also called ’slavery’!

        1. Jou (Mxyzptlk) Silver badge

          Re: Remind me...

          Slavery is something completely different.

          1. kmorwath Silver badge

            Re: Remind me...

            Exploiting unpaid work is *slavery*.

            1. Anonymous Coward
              Anonymous Coward

              Re: Remind me...

              Slavery requires coercion to do the work. If the worker can walk away and choose to do something else then they are not a slave.

              And slavery can involve payment as well. Usually not a lot, a little pin money.

              1. Anonymous Coward
                Anonymous Coward

                Re: Remind me...

                And walking out of one slaver's building and into another's is not coercion? Trump is not worried about the costs of ACA per se, but how it loosens control by the oligarchy. All employment is a ponzi at the exploitation of the employed. Collusion to entrapment for exploitation is coercion. Non-compete agreements are tacit acknowledgement of exploitation, otherwise, why not compete?

              2. kmorwath Silver badge

                Re: Remind me...

                The best slaves are those who believe they are not - which was what happened to communism, and in any authoritarian state. Little chances they can revolt. Brainwash them they have to work for free for the "better, common good" and you can become rich and powerful exploiting them at will. Read Animals Farm, once in your life.

                And reading at comments like yours, it's clear why we are going towards new dictatures - there are many people who just wait to be able to exploit others without noone hindering it. It's always greed that dooms freedom.

      2. Homo.Sapien.Floridanus Silver badge

        Re: Remind me...

        They will pay up as soon as they realize that without Sudo, nobody will not make them a sandwich.

    2. VoiceOfTruth Silver badge

      Re: Remind me...

      All very well and good, but shaming doesn't usually work.

      Perhaps it is time for the major distributions to demand £$€ 10 a year for support. They can then feed the money to the maintainers of things like sudo. Those who don't pay can build the software from source and maintain it themselves. They are free to complain and build their own distros if they have the time.

      The problem of un/underfunded open source development is not going to go away.

      1. Persona Silver badge

        Re: Remind me...

        Are saying that to solve this issue with "free" software it shouldn't be free?

        1. gnasher729 Silver badge

          Re: Remind me...

          “ Are saying that to solve this issue with "free" software it shouldn't be free?”

          Free as in “free speech”, not free as in "free beer”.

          1. demon driver

            Speech vs. beer

            If it isn't both, it isn't free.

            The old and still unanswered question is how to keep it free – even if just for everyone except those few who both profit greatly from it and have tens of thousands of times the funds it would need to fully finance its development and its developers.

            1. Roland6 Silver badge

              Re: Speech vs. beer

              >The old and still unanswered question is how to keep it free

              Once release it is always free, however, if you want it maintained...

      2. Dan 55 Silver badge
        Facepalm

        Re: Remind me...

        I'm sure Red Hat, Amazon, Google, and Microsoft will solve the problem if they chuck in $40 collectively.

        1. Anonymous Coward
          Anonymous Coward

          Re: Remind me...

          Where will they spend the $39.99 they'll get back in change?

      3. kmorwath Silver badge

        Re: Remind me...

        Downvotes here will show how many believe FOSS is "software I don't have to pay for" and not "software I can have the source code for".

        1. demon driver

          Re: Remind me...

          The "source code" aspect is already spelled out by the "O". For the "F" to really be fulfilled it would have to give everyone on the planet access to its use including those without a budget.

          1. kmorwath Silver badge

            Re: Remind me...

            Think, people have to pay for food and other essential items, and should not pay for software? Do you get paid for your work? Where the money come from?

            Yes, many believe the F is for "Freetards" -. but it's time they too learn there are no free lunches...

        2. Dan 55 Silver badge

          Re: Remind me...

          No, downvotes for not recognising that corporations which make billions from cloud services that run on FOSS should be paying up.

      4. VoiceOfTruth Silver badge

        Re: Remind me...

        Lots of downvotes. Well, let's read their proposals for maintaining sudo.

        I expect it will be 'let the big cloud companies pay'. That's not good enough. If you are using something you are still a user.

        Are you going to step up to the plate and maintain this free of charge for everyone? If not, why not? And then, when you feel your time is being taken for granted, we can all point our fingers at you and say 'too bad'.

        There are a lot of toxic voices in the OSS world - a sense of entitlement, usually from people who contribute nothing but their bile.

    3. kmorwath Silver badge

      Re: Remind me...

      How do you beleve they got record stock prices?

      Anyway I believe the Linux Foundation can't only take care of the kernel only any longer - there are cases like this where basic functionalities are handled by software written by the lone developer in Nebraska.

      1. Andy The Hat

        Re: Remind me...

        It seems that the only way that FOSS can work commercially and ethically is to not be free to commercial users. How the hell that works I've got no idea.

        1. kmorwath Silver badge

          Re: Remind me...

          That's why a lot of FOSS projects changed and are changing licences - but one you published the code with another licence, bug companies like Google and AWS will simply fork it for their own use.

          You can what MinIO did - shutting down the public repo wholly - but the previous code is still there, even if no new code will be published.

          Anyway the writing is on the wall - unless FOSS is subsidized by other interests - namely data hoarding and subsequent ad slinging, dynamic pricing and customers' behavioural modifications, it's not a feasible business model, where do money come from?

          1. Dan 55 Silver badge

            Re: Remind me...

            Being reasonable, recognising your company's success is built on the work of others, and compensating them for that work.

            1. Jou (Mxyzptlk) Silver badge

              Re: Remind me...

              That is very un-American... You take the money you earned on his work and sue him. That is American.

            2. kmorwath Silver badge

              Re: Remind me...

              In which world do you believe you live in? People don't pay what they can steal without issues. FOSS can't change mankind - not even religions could...

              And today we see outstanding example of pure, enormous greed being promoted at the top. Good luck with "being reasonable"....

              1. Anonymous Coward
                Anonymous Coward

                Re: Remind me...

                > In which world do you believe you live in?

                Trying very hard not to live in the world as you see it: an ugly place that you appear to have no interest in changing.

                1. kmorwath Silver badge

                  Re: Remind me...

                  I have full interest in changing it, just I don't believe a religion like FOSS can change it.

                  Paying people properly for their work is one way to change it. Waiting for charitable companies is not a way to change it. And brainwashing people into believing they can work for free and maybe one day someone will pay them is not a way to change it, it a way to endure world becomes worse and worse and people are exploited by a few ones.

                  Read for example: https://theintercept.com/2026/01/02/empire-ai-sam-altman-colonialism/

                  "Empires similarly consolidate a lot of economic might by exploiting extraordinary amounts of labor and not actually paying that labor sufficiently or at all. "

                  You've all are being blindsided by not having to pay for software. Because greed is one of the most powerful insticts of people. That's why you post as AC - are you ashamed of your opinions? I'm not.

                  1. jake Silver badge

                    Re: Remind me...

                    I have been contributing to the FOSS world since before BSD was BSD (and indeed, before Microsoft met an IBM PC). Quite frankly, I have never thought about getting paid for it for one simple reason: It doesn't matter.

                    Read that again, it's important: It doesn't matter.

                    I wrote code, created patches, chased down bugs, wrote documentation, and all the other bits & bobs that go into FOSS because I am extremely selfish. I wanted it to work for ME, my way, in my time. Once it worked the way I wanted it to work, it solved a problem that I had, which more than paid for the time and effort that I put into it.

                    Then I released it to the wild, without caring if anyone else needed it. It's MINE, it scratched my itch ... now, if you have the same itch feel free to make use of my scratching post. No point in you re-inventing the wheel to do the same job ... and better, it frees you up to work on something to fix another itch.

                    Thankfully, other people have many other itches. In aggregate, over time, and over the generations, we have created something useful. This will continue indefinitely.

                    1. kmorwath Silver badge

                      Re: Remind me...

                      Where does your income come from? It might doesn't matter for your because your live like a monk, or you have another nice source of income, mr. Stakanov.

                      Other people don't have that., or don't like to live like a monk, so they MUST be paid for their work. Telling people they shoud work for FREE while others make tons of money exploiting their work is utter, pure greed.

                      But I understand your issue (and Stallman one) - before the PC money were made selling hardware, so companies may give away the source code, especially since nobody has their own mainframe or mini to run it. The PC changed everything - now money was made writng and selling software.

                      But old people like you can't accept changes, and being paid for doing something else, don't want to pay those who actually write software. But software paid by other interests, especially bevihoural control. is inherently "enshittifed".

  2. Anonymous Coward
    Anonymous Coward

    Looks like sudo-rs is the help he wanted.

    1. that one in the corner Silver badge

      Just so long as this entirely new team can demonstrate they have a long term interest in maintaining sudo-rs qua doing what sudo does rather than qua showing off how neat it is to use Rust.

  3. DS999 Silver badge

    What does it need a maintainer for?

    It is already way too loaded down with "features" when it should be simple and streamlined so it is easy to audit. If a security issue is found someone at Redhat or whatever will fix it and push the fix upstream.

    This is the perfect example of software that SHOULD NOT have a day to day maintainer because that just encourages people to add more crap that a security critical application does not need or want.

    1. Anonymous Coward
      Anonymous Coward

      Re: What does it need a maintainer for?

      It's been around forever, fully mature and hardly likely to be a risk nowadays.

      Like measles.

      1. LionelB Silver badge
        Coat

        Re: What does it need a maintainer for?

        > Like measles

        Well there's a cautionary tail. The UK recently lost it's measles elimination status because, it seems, too many users have not been applying the appropriate security updates.

        1. LionelB Silver badge

          Re: What does it need a maintainer for?

          tail tale

          1. Anonymous Coward
            Anonymous Coward

            Re: What does it need a maintainer for?

            and 'Its", not "it's"

            It's means "it is".

            Its is the possessive of it.

            Not that I'm a spelling nazi pendant or anything.

            1. LionelB Silver badge

              Re: What does it need a maintainer for?

              I know that, and yes you are (a pendant – nice touch). I think you'll find you're missing a capitalisation in there, mind.

      2. martinusher Silver badge

        Re: What does it need a maintainer for?

        Measels is only a risk if people get complacent and assume they don't need to be vaccinated.

        Unlike viruses or just about everything else software doesn't evolve on its own. A program written decades ago will still work exactly the same today as it did when it was first written. Environments change, of course, but for a utility like this KISS is paramount Its a good example of a piece of code that has to be 100% deterministic. So it should be simple to maintain (I'd do it if nobody else wanted to.....but I'm likely not the best candidate for the job).

        (The overriding problem I've had with programmers, especially applications programmers, is "Idle hands make the Devil's work". They just can't resist tinkering with things, especially if the code is in a user environment. The result is that quite often something never gets finished, there's always a new version that'll be killer coming out in the near future.)(Sounds familiar?)

      3. jockmcthingiemibobb

        Re: What does it need a maintainer for?

        In 2019, Samoa proved the anti-vaxxers were indeed idiots.

    2. m4r35n357 Silver badge

      Re: What does it need a maintainer for?

      The phrase "feature complete" went out of fashion decades ago.

  4. zimzam Silver badge

    Given the trends elsewhere, I'm surprised there hasn't been more of a push towards run0, especially since most distros already include it anyway.

    1. m4r35n357 Silver badge

      or doas?

      1. zimzam Silver badge

        There's not been a concerted effort to push BSD programs into Linux, there has with systemd. I'm not saying it's a good move (it's nowhere near as mature as the other two), I'm just surprised it hasn't happened.

        1. Anonymous Coward
          Anonymous Coward

          run0

          Yeah, I was going to comment somewhere in this thread anyway along the lines of "Sadly for everyone, isn't poettering already working on some very noxious pseudo-replacement for sudo?"

          And obviously I would much rather that distros didn't allow him to extend his tentacles even further!

          (I mean, it doesn't even have a decent pun-worthy name in the traditional fashion!)

          1. Anonymous Coward
            Anonymous Coward

            Re: run0

            > it doesn't even have a decent pun-worthy name in the traditional fashion

            AgentP is more honest than we give him credit for - he has put the revision number right into the command name.

            You are still using run0? No wonder it doesn't recognise any of the option flag names! All the cool kids are in run7.4

            Now, have you got 129GB free to install the dependencies? Why so many? Well, the install script needs run6.5, where the source/destination options were swapped to make it easier, and the installer for that needs - what? You don't know why 'run' needs a source option? Ok; when it was combined with 'cat', after we moved all the file operations into that daemon...

        2. m4r35n357 Silver badge

          Alpine provide it, and recommend it over sudo.

  5. steelpillow Silver badge
    Headmaster

    superpowers not superuser

    the su in sudo means substitute user, not superuser. People use "superuser" to indicate the granting of root privilege, but these days sudo is more often used to confer only a limited set of magic privileges, for example to gain admin privilege for a particular service.

    1. Anonymous Coward
      Anonymous Coward

      Re: superpowers not superuser

      Vanilla su did that 30-40 years ago. And without tens of thousands of lines of bloatware too.

      $ man su

      ...

      NAME

      su – substitute user identity

      1. doublelayer Silver badge

        Re: superpowers not superuser

        No, it didn't, specifically the "often used to confer only a limited set of magic privileges, for example to gain admin privilege for a particular service" part. Su does less than sudo. Sometimes, all you need or want is what su does. In that case, you don't use sudo and are fine. Sometimes, you don't even need what su does so you leave out both. But if you ever want slightly more than the one feature su provides, then you look for replacements, whether that's sudo, doas, sudoRS, or something else. Pretending that the feature you want is the only feature that exists doesn't help.

        1. Bebu sa Ware Silver badge
          Windows

          Re: superpowers not superuser

          Sometimes you want to permit a subset of unprivileged users to run particular commands as a dedicated non privileged user without the hassle suid binaries and another posix group or weird permissions and ACLs. Sudo was ideal for this situation.

          1. DanAU

            Re: superpowers not superuser

            Was? It still is!

        2. Anonymous Coward
          Anonymous Coward

          Re: superpowers not superuser

          Your wilful ignorance of su's capabilities is remarkable.

          1. steelpillow Silver badge
            Facepalm

            Re: superpowers not superuser

            My wilful omission of su's capabilities is because the article and I are talking about sudo, you dull fscker!

            Are you one of my prized shadow downvoters? Like many here, I have one regular clown and another occasional assistant. Frankly, when it comes to annoyance you are not in the same league as Microsoft popups. Too much inherent comedy, for a start.

            [torn between FFS and Joke Alert icons]

            1. doublelayer Silver badge

              Re: superpowers not superuser

              Actually, I think it is me they were accusing of not knowing what su does. Since they didn't specify what it does which I clearly don't understand, I'm none the wiser for what similarity it is supposed to have with sudo that makes it relevant. Therefore, I continue to think that it does a smaller number of things than the stuff sudo does meaning some people will want sudo because they want one or more of those.

    2. ChoHag Silver badge

      Re: superpowers not superuser

      > these days sudo is more often used to confer only a limited set of magic privileges, for example to gain admin privilege for a particular service.

      That was the plan but the documentation for its configuration begins with the immortal phrase "The sudoers file grammar will be described below in Extended Backus-Naur Form (EBNF). Don't despair if you are unfamiliar with EBNF; it is fairly simple" and so its contents are only ever "root ALL=(ALL:ALL) ALL"* so that users can type in "sudo su".

      * Quick quiz, from memory only: what does each of those ALLs do?

  6. Anonymous Coward
    Anonymous Coward

    I hear that Line-art Pottering is available.

    1. Adair Silver badge

      I'm sure, in due course, systemd will obviate any need for 'sudo', then everyone's concerns about sudo's future will be settled.

      1. Kurgan Silver badge

        You mean systemd will gobble up and enshittificate sudo, too. Generating a ton of new issues and bugs. But you are right, it will make sudo obsolete and will solve the maintainer's issue.

        After all, over time it will make all of Linux userspace obsolete, while making Linux become a total shitload of crap.

        1. Anonymous Coward
          Anonymous Coward

          making Linux become a total shitload of crap

          We passed that point a long time ago.

          1. Kurgan Silver badge

            Yes, we actually did once systemd and Gnome smeared crap all over the place.

        2. steelpillow Silver badge

          Nope. SystemD/Linux is already a shitload of crap (apt, as penguins have only one excretory orifice). GNU/Linux will still be chugging along in the background, the cognoscenti's choice, like it has for the last, what, 30 years or so?

      2. Alan J. Wylie

        systemd already has

        NAME

        run0 - Elevate privileges

        SYNOPSIS

        run0 [OPTIONS...] [COMMAND...]

        DESCRIPTION

        run0 may be used to temporarily and interactively acquire elevated or different privileges.

        It serves a similar purpose as sudo(8), but operates differently in a couple of key areas:

        1. Anonymous Coward
          Anonymous Coward

          Does Agent P even know how to spell "attack surface"? I shall be winding my OpSec colleagues up about this one, tomorrow!

    2. AnAnonymousCanuck
      Joke

      I hear that Line-art Poottering is available.

      FTFY

      AAC

  7. alain williams Silver badge

    What fraction of Musk's $852 billion fortune ...

    would be needed to support not just Todd Miller but a whole host of small people who provide Open Source tools that underpin Musk's fortune.

    The same is true for Bezos, Ellison, ... could all also do so with what they find after a quick grope in their sofa but none of them will as they are just interested in shovelling money into their wallets.

    1. Bebu sa Ware Silver badge
      Coat

      Musk, Bezos, Ellison… " quick grope in their sofa"

      I suppose that is the essential difftence between these lucky few and we poor mortals.

      Most lowly peons would prefer a quick grope on their sofa instead of blindly thrusting their grasping paws into the innards of their lounge in the vain search for small change like the apocryphally demented scotsman missing a farthing.

      These are not lovely people.

    2. VoiceOfTruth Silver badge

      Re: What fraction of Musk's $852 billion fortune ...

      Bezos has so much money because people like you and me buy from Amazon. We then bemoan the state of the high street.

      1. I could be a dog really Silver badge

        Re: What fraction of Musk's $852 billion fortune ...

        Which is why I do my best to not use Amazon and support more local businesses

  8. frankvw Silver badge

    Many vital open source resources rely on the devotion of a few individuals

    XKCD 2347 has been pointing this out for some time.

    1. bigphil9009

      Re: Many vital open source resources rely on the devotion of a few individuals

      It seems few people are aware of this gem! (Although I have to admit that I did come to post it too but was beaten by your good self!)

    2. Alan J. Wylie

      Re: Many vital open source resources rely on the devotion of a few individuals

      There's another xkcd sudo related cartoon.

  9. Alan J. Wylie

    doas

    I switched to the Linux port of OpenBSD's doas when I bought a couple of Yubi keys.

  10. m4r35n357 Silver badge

    A reminder

    "sudo" does not mean "computer: "

    It should only be used when it is actually needed!

    Too many "tutorials" use sudo gratuitously, and that IS a problem.

    1. Steve Graham

      Re: A reminder

      The standard Ubuntu setup, inherited or copied by other distributions, is that logging in as root is disabled, but sudo grants the logged-in user root access to all commands (on submission of their own password). This is why many tutorials on system administration put "sudo" at the front of all commands.

      It seems wrong, but I can't put my finger on exactly why.

      1. Anonymous Coward
        Anonymous Coward

        Re: A reminder

        cackles in screen -r

      2. I could be a dog really Silver badge

        Re: A reminder

        A someone who currently has a few windows open to remote systems, all sat at a # prompt after "su -" ...

        If you permit root logins, or permit the use of su. then eveeryone who needs it has the root password. That's inherently insecure. For example, if one person in a team leaves (or stops needing the facility), then you have to change the password and everyone else has to get used to a new one.

        If you use sudo, then they use their own password which means (for example) blocking one user from the system also blocks their root access. OK, so far, only a small step up in security.

        The big thing is that once people are using sudo, then it's logged who ran what - "jbloggs ran sudo $[somethingstupid]" v.s. "root ran $[somethingstupid]". And then you can control who can do what. root login or su is a blunt tool - it's all or nothing. You can (for example) give someone permission to only manage the mail system commands and nothing else, or restart the web service and nothing else, or ...

        OK, all a bit moot on a single user system - but it's a step up from every tutorial starting with "login as root" or "run 'su -'"

        1. CapeCarl

          Re: A reminder

          Exactly how things were handled in my 9 years in a data center supporting the physical and emotional needs of 5K Linux servers (and their several hundred users.)...I never had the root password, and was very rarely hindered in my workflow because of that. // financial firm

        2. kmorwath Silver badge

          Re: A reminder

          Yes, it's another workaround to the flawed design of Unix - yoi can't simply add users to an administrators group, and remove them when they leave...

          1. the spectacularly refined chap Silver badge

            Re: A reminder

            You can have as many username/credential pairs aliased to UID 0 as you like.

            1. kmorwath Silver badge

              Re: A reminder

              So why it needs a "third party" application? And "aliased" is different from needing to run a process as a specific user ID.

              The whole Unix security model is utterly outdated, designed for a different era.

          2. I could be a dog really Silver badge

            Re: A reminder

            sudo is far far more than just "giving root access". It's giving access to a carefully defined set of resources - and not just to root.

            Just adding a user to an admin group is just ... giving them full access to everything an admin can do. Adding them to a line in the sudo config file means you can let a user (or group of users - just add remove as required) access to specific commands. E.g. you could create a group for printer admins who have the ability to manage the print services (stop/start daemons, look at the queues) but nothing else.

      3. Jou (Mxyzptlk) Silver badge

        Re: A reminder

        sudo it is wrong

        1. MonkeyJuice Silver badge
          Coat

          Re: A reminder

          sudon't do that.

    2. DJohnson
      Linux

      Re: A reminder

      This, a thousand times this. I encounter FAR too many people who simply treat "sudo" as the first part of ANYTHING THEY DO on the CLI, because that's what the low-quality lazy examples do.

      Equally bad is "if the command didn't work, up arrow and prepend 'sudo'". Uh, no, the command said the remote host was not found. _Read_ what is on the screen and /comprehend/ it before you blindly assign a corrective action.

      1. ChoHag Silver badge
        Angel

        Re: A reminder

        I have no problem with people doing this. If people thought before they blindly execute commands that obtain superuser privileges my corporate overlords wouldn't need to pay me ridiculous sums of money to fix the mess it caused.

      2. kmorwath Silver badge

        Re: A reminder

        No surprise since most of what you need to do in Linux requires root privileges....

      3. Justin Pasher

        Re: A reminder

        Reminds me of people that think you fix permission issues by running chmod 777 somefile

  11. Anonymous Coward
    Anonymous Coward

    Age?

    To me, it seems to be more a matter of age than of money.

    1. Anonymous Coward
      Anonymous Coward

      Re: Age?

      Then where are the youthful volunteers eager to take over?

      There may, of course, be an age factor in that many of the maintainers date from an era in which they genuinely felt they were contributing to a community whereas today the beneficiaries are often corporate freeloaders.

      1. Anonymous Coward
        Anonymous Coward

        Re: Age?

        Sadly nowadays, many potential youthful volunteers (in certain countries at least) are burdened with massive amounts of student debt to pay off, home purchase prices well out of reach, and (if they're "lucky") quite possibly working for those horrible 9-9-6 exploitative grasping tech overlords, meaning that spare time and energy to do some 'recreational coding' is probably quite far from their thinking as they try to keep body and mind together…

        1. kmorwath Silver badge

          Re: Age?

          I'm afraid it's they too busy to become "creators", and writing code is so last century... today you get rich without writing code, just doing stupid things on TikTok.

  12. JohnSheeran
    Trollface

    Can't AI Just Fix It?*

    *See the icon.

  13. Ben Burch

    Reminds me of this XKCD - https://www.explainxkcd.com/wiki/index.php/2347:_Dependency

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon