~~Rust based~~ MIT licensed coreutils
Yes! I mean, don't divert the hate of permissive license to Rust. Those are unrelated but now more people hate Rust because of this.
They’re not unrelated. Lauded projects to rewrite some gpled c thing in rust are almost universally mit licensed.
Attempts to get those licenses changed are almost universally met with a line in the sand.
There are a lot less GPL projects in your system than you might think. Your core system is already filled with liberally licensed libraries and programs. Case in point, since you talked about rust rewrites, original sudo is not GPL software.
Oh no, a non gpl package on my computer? How did you find out about my one weakness! I’m melting, melting! Oh, what a world, what a cruel, cruel world!
If you're posting from Desktop Linux, your comment utilized at least 10 liberally licensed libraries. And that's before it got into the wire. GPL packages are a MINORITY, not a majority with exceptions.
Oh no, with so few gpl packages how will i maintain an unkempt beard and bald ponytail?! How will my ketchup stained Grateful Dead tee hold together at this critical low level of gpl? At this rate my bare feet will stop stinking up the break room!
Yeah...
TLDR:
Current status for 26.04 LTS
We shipped rust-coreutils as the default in Ubuntu 25.10 to maximise real-world testing ahead of the LTS. Based on the audit findings and remediation progress, here is where we stand for Ubuntu 26.04 LTS.
We have included the latest upstream release 0.8.0 in Ubuntu 26.04, which incorporates the bulk of the security fixes.
cp, mv, and rm continue to be provided by GNU coreutils in 26.04. These utilities have remaining open TOCTOU (time-of-check to time-of-use) issues (8 as of Apr 22, 2026) that need to be resolved before we are confident shipping them.
Our plan is to address the remaining issues as soon as possible and target Ubuntu 26.10 with 100% rust-coreutils.
The "reported upstream" link is broken (fixed link).
The amount of issues is scary
A significant number are slight differences from GNU behavior that likely wouldn't impact users or just random miscellaneous project tasks like "this is inefficient" or "clean up this thing." Not saying there aren't problems to be addressed, just that the number looks more concerning than it actually is. Wouldn't be surprised if some are outdated as well.
There is the odd (genuine) security issue tbf. But they are more of the variant:
"If an attacker is close enough to sneak that on me, then I'm probably already screwed."
Linux
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0