Feed: Slashdot
Feed Link: https://slashdot.org/
---
Title: Ubuntu's 'Rust-ification' Hits New Milestone: Coreutils Migration is
Complete
Link: https://news.slashdot.org/story/26/09/15/2115...
"Ubuntu has managed to do away with GNU Core Utilities in its default stack,"
reports the blog It's FOSS. The last three utilities - cp, mv and rm - have
been moved to versions from the uutils project (which reimplements utilities
in Rust). Everything else, from ls and cat to chmod and du, made that jump in
earlier releases... Canonical started "oxidizing" Ubuntu last year, and
Ubuntu 25.10 became the first release to ship [ the uutils project's]
coreutils as the default. That release also made sudo-rs the default
privilege tool, replacing a command that had been in place for decades. 26.04
was the release where the plan did slow down quite a bit, as Canonical kept
cp, mv, and rm on their GNU versions due to a bunch of TOCTOU issues that
were blocking the full implementation. These were caught during an audit,
when Canonical commissioned Zellic for two rounds between December 2025 and
March 2026, focusing on the most security-sensitive utilities first. Across
both rounds, Zellic raised 113 issues, and 44 of them were assigned CVEs.
Canonical says the vast majority have been resolved. Getting here has had its
ups and downs, and the last stretch was not clean. In July, uutils cp went
back into the archive and came straight out again after it broke live image
builds. The fix was quick; as the developers marked it "Critical," the fix
went upstream, and the migration landed in time for 26.10. When typing
commands, nothing changes for you on the surface. uutils coreutils is
designed to be a drop-in replacement for essential GNU tools, and the project
treats any divergence from GNU as a bug, further pointing out that some
options may still be missing or behave differently. So if you prefer staying
on the GNU version, you have the option to install the coreutils-from-gnu
package that houses all the required components.
Read more of this story at Slashdot.
---
VRSS v2.1.180528
|
Slashdot 
