6·
17 hours agoUbuntu did invest in a security audit of uutils. It revealed issues that show fundamental misunderstandings on how to use posix APIs. If they cared about security they would have postponed the adoption at least one more cycle. Uutils are they not ready for general availability.
Plus after decades of bug fixing coreutils doesn’t have lots of security issues.
The VP of engineering of canonical keynoted Rust conf about uutils and is pushing forward the project. My guess is for political capital inside canonical.
Will long term uutils or another coreutils written in Rust will be a great improvement. Today is not the day.
As an example look at that https://github.com/uutils/coreutils/issues/10011
Even calling it a race is a looking at the issue wrong. They are creating the file with more permissions that necessary and restricting later instead of the other way around.
There was another issue with chroot that had the same fundamental mistake.