On Fri, 2026-10-30 at 14:05 +0100, Simon de Vlieger wrote: > On Fri, Oct 30, 2026, at 1:59 PM, Simo Sorce via devel wrote: > > > It is not like putting this search in duckduckgo: "is there some > > documentation no how to write safe suid programs in unix ?" came up > > with zero results ... > > Sure, but the initial quote I responded to was: > > > The upstream Rust security team has not documented that Rust is > > safe to > use in SUID binaries > > Which is different from *how* to write safe-ish SUID programs (for > which I > assume approaches are language agnostic).
Yes this is true, but it just puts more responsibility for evaluating what the code does on the shoulders of the implementer. For example auditing that no crate uses getenv(), or ensuring that before any code is executed the environ is purged/validated... Florian does bring up a valid point (it would probably be better to write such tools in no_std mode, it doesn't make it impossible to write suid tools in rust though. Simo. -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
