trifectatechfoundation / trifectatechfoundation/sudo-rs
Support config paths under /usr/
@squell is already working on this.
Since Aug 25, 2026.
- Dominant language
- Rust
- Stars
- 4.5k
- Forks
- 179
- Avg merge
- 16h 45m
- Merged PRs (30d)
- 4
Description
Describe the feature you'd like see implemented in sudo-rs
sudoers configs should be able to be read from /usr/lib/sudo/sudoers and /usr/lib/sudo/sudoers.d/
What problem can be solved with this feature?
In postmarketOS, we use sudo-rs as our default sudo implementation. This has worked fine so far, but we are attempting to limit configs installed to /etc/, reserving it as a sysadmin configuration directory per the concept of hermetic-usr. This is in conflict with sudo-rs, which only supports loading configs from /etc/.
Describe alternatives you've considered
Because sudo-rs only supports loading sudoers from /etc/, the only way we can handle sudoers is to use tmpfiles.d to copy the file from /usr/share/factory/etc/ on first-boot. It would be much easier if sudo-rs was able to read sudoers from a path under /usr/, removing the need for complex config file logic.
Additional context
- https://github.com/uapi-group/specifications/issues/76 (specifically the section at the top on sudo)
- https://uapi-group.org/specifications/specs/configuration_files_specification/ (bit of an explanation on hermetic-usr)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.