The new sudo-rs is meant to be a near drop-in replacement for sudo, but some of the less secure aspects of sudo will not be supported.

The New Stack is a publication covering trends and technologies in cloud-native development, DevOps, and software delivery. Developers can learn about containerization, Kubernetes, and cloud computing, as well as explore topics such as microservices architecture, serverless computing, and continuous integration/continuous delivery (CI/CD) pipelines.

The New Stack

Ubuntu 25.10 will replace the traditional sudo command with sudo-rs, a Rust-based equivalent developed by Trifecta Tech Foundation. The new implementation leverages Rust's memory safety guarantees to eliminate vulnerabilities common in C-based software, including null pointer dereferences, use-after-free errors, and data races. While sudo-rs is designed as a near drop-in replacement, some less secure features like LDAP distribution of sudoers files won't be supported. Users can currently install sudo-rs alongside traditional sudo for testing, and Canonical plans to keep the original sudo available in archive repositories for those who prefer to roll back.

Ubuntu 25.10 Replaces sudo With a Rust-Based Equivalent

<blockquote>
<p>If you want to try out sudo-rs, you’ll need to spin up an instance of Ubuntu 25.10 desktop. … Once you have version 25.10 up and running, if you go digging, you’ll find that it doesn’t ship with sudo-rs (yet).</p>
</blockquote>
<p>tl;dr - You can install sudo-rs, but it’s still in testing/pre-release.</p>
