Thoughts on upgrading sudo in core.gz

[Zhe]

Hi everyone,

I noticed that the current sudo version is quite old (Sudo version 1.7.8p1), so I’m planning to upgrade sudo in core.gz. (Although for convenience, I usually work under the tc user with ALL=NOPASSWD: ALL, I know this is a security risk.)

I also found a previous related discussion:
https://forum.tinycorelinux.net/index.php/topic,21468.msg134317.html#msg134317

I wanted to see how much the new sudo has bloated and whether it’s within my acceptable range.

Finally, the new core-new.gz (core_16.2) is about 1MB larger than before:
13.2 MiB   core-new.gz
12.5 MiB   core.gz


Below are the details of sudo in the new core-new.gz.
I didn’t pursue minimal size and included cvtsudoers, sudoreplay, and some .so files.

Note: Don’t compile with --disable-root-sudo.

Code: [Select]

Sudo version 1.9.17p2
sudo/usr/  1.4 MiB[ total ]
├── bin/
│   ├── cvtsudoers* 312.0 KiB
│   ├── sudo* 628.0 KiB
│   ├── sudoedit -> sudo*
│   └── sudoreplay* 108.0 KiB
├── libexec/    128.0 KiB[ total ]
│   └── sudo/
│       ├── audit_json.so
│       ├── group_file.so
│       ├── sudo_intercept.so
│       ├── sudo_noexec.so
│       └── system_group.so
├── sbin/
│   └── visudo* 256.0 KiB

This is within my acceptable range.

I’m wondering if the maintainers would consider upgrading sudo? (This is not a mandatory request, just sharing my thoughts )

[Juanito]

I've looked at updating sudo from time to time, but I'm not totally sure how @roberts configured it originally and anyway the result has been significantly larger than the original, so I've never gone ahead.

[hiro]

there's also doas