With Ubuntu 25.10 [1]Canonical is planning to make use of more Rust-written system components and so far most of that talk has been about [2]transitioning to Rust Coreutils "uutils" in place of GNU Coreutils. It's also been firmed up today that Canonical is planning on using sudo-rs by default as a replacement to sudo.

The sudo-rs project has been in development for several years as [3]a Rust-based, memory-safe sudo implementation that can serve as a drop-in replacement. The sudo-rs project is maintained by the Trifecta Tech Foundation non-profit and today they confirmed Canonical's plans for using sudo-rs by default with Ubuntu 25.10.

They wrote in today's [4]announcement :

"Canonical plans to make sudo-rs the default in Ubuntu 25.10. This will allow time for acceptance testing by end-users and ensure that sudo-rs is battle-tested before its inclusion in the next Long Term Support (LTS) release: Ubuntu 26.04 LTS, which will be supported for a minimum of 12 years. We are looking forward to learning from the community how we can further improve sudo-rs."

The sudo-rs developers in turn will be working on adding coarse-grained shell escape prevention "NOEXEC", support for controlling AppArmor profiles, sudoedit support, and support for older versions of the Linux kernel.



[1] https://www.phoronix.com/news/Ubuntu-25.10-Rust-Coreutils

[2] https://www.phoronix.com/news/Ubuntu-2510-Rust-Coreutils-Plan

[3] https://www.phoronix.com/news/sudo-su-rewrite-rust

[4] https://trifectatech.org/blog/memory-safe-sudo-to-become-the-default-in-ubuntu/