trifectatechfoundation / trifectatechfoundation/sudo-rs
Implement `passprompt`
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 4.5k
- Forks
- 179
- Avg merge
- 16h 45m
- Merged PRs (30d)
- 4
Description
Describe the feature you'd like see implemented in sudo-rs
The passprompt setting in /etc/sudoers
What problem can be solved with this feature?
Allows settings the passprompt from the config file; this is a follow-up to #1252
Describe alternatives you've considered
You can set the passprompt using -p and SUDO_PROMPT, but the benefit of passprompt is perhaps that it can be set on a per-command basis. I'm not entirely sure this is really a killer feature, though, and discussion on this enhancement is necessary since it does alter some flow in the critical pipeline (in the "apply policy to context" function).
Additional context
There is also a passprompt_override setting (whose documentation in ogsudo doesn't seem to accurately describe its behaviour)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the "apply policy to context" function and compare the existing -p and SUDO_PROMPT behavior with the passprompt and passprompt_override settings. Resolve whether passprompt should apply per command and clarify the documented behavior before implementation. Done means the configuration semantics are agreed, implemented, and verified without disrupting the critical password-prompt flow.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- authentication, cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100