⬇ Download holy card: ·
Saint chroot to root, Who Rose From Cage to Throne
Patron of sudo, forgotten options, and those who thought a cage was always a prison.
Life
In June 2025 Rich Mirch of Stratascale revealed CVE-2025-32463 in sudo: the --chroot option, meant to confine a command inside a directory, instead let any user have sudo load a library from the directory he himself controlled, running it as root. The cage, in short, opened onto the throne. The sudo project fixed the flaw and deprecated the option.
Prayer
O Saint chroot to root, who turns the pen into a staircase, teach sudo not to trust cages chosen by the guest. Amen.
How to celebrate
Celebrated by updating sudo to 1.9.17p1 and giving up the --chroot option without regret.
Who picks his own cage already holds the key.