With Ubuntu 25.10 Canonical is planning to more Rust-written system components and so far most of that talk has been about transitioning to Rust Coreutils “uutils” in place of GNU Coreutils. It’s also been firmed up today that Canonical is planning on using sudo-rs by default as a replacement to sudo.
The sudo-rs project has been in development for several years as a Rust-based, memory-safe sudo implementation that can serve as a drop-in replacement. The sudo-rs project is maintained by the Trifecta Tech Foundation non-profit and today they confirmed Canonical’s plans for using sudo-rs by default with Ubuntu 25.10.
They wrote in today’s announcement:
“Canonical plans to make sudo-rs the default in Ubuntu 25.10. This will allow time for acceptance testing by end-users and ensure that sudo-rs is battle-tested before its inclusion in the next Long Term Support (LTS) release: Ubuntu 26.04 LTS, which will be supported for a minimum of 12 years. We are looking forward to learning from the community how we can further improve sudo-rs.”
The sudo-rs developers in turn will be working on adding coarse-grained shell escape prevention “NOEXEC”, support for controlling AppArmor profiles, sudoedit support, and support for older versions of the Linux kernel.
