Ubuntu Is Swapping Out Sudo for a More Secure, Rust-Based Version

According to Canonical, the upcoming Ubuntu 25.10 release will replace the long-standing default sudo utility with sudo-rs, a reimplementation written in the Rust programming language, and this transition will extend to the forthcoming Ubuntu 26.04 LTS. Ubuntu 25.10 Questing Quokka is scheduled for release on 9 October 2025.

Built in Rust, sudo-rs aims to deliver enhanced security and improved performance, with features including NOEXEC to prevent privileged processes from spawning child processes and integration with AppArmor profiles to impose stricter process-level restrictions.

Canonical notes that sudo-rs remains compatible with older Linux kernel versions, including 5.9 and earlier, ensuring broad applicability across diverse environments, and the roadmap aims for full feature parity with the original sudo before complete replacement. For now, daily builds allow users to revert to the legacy sudo using commands shown in the article. It is also confirmed that Ubuntu 26.10 LTS will adopt sudo-rs as the default privilege escalation utility.