What does sudo stand for? The answer changed while nobody was looking

A DEC VAX 11/780 — the class of shared departmental machine sudo was invented to police: many users, one root, and a log of who did what. Photo by Takuya Oikawa, CC BY-SA 2.0.

Ask a room of engineers what sudo stands for and most will say superuser do without hesitating. That was true in 1980. It is not quite true anymore, and the drift is the interesting part: the command outgrew its own name, and the name quietly got reinterpreted to keep up. The official project page today spells it su "do", and since su itself was redefined in the man pages from superuser to substitute user, the modern expansion of sudo is substitute user, do. Same four letters, new etymology, no announcement.

Who wrote sudo?

sudo was written around 1980 by Robert Coggeshall and Cliff Spencer at the Computer Science Department of SUNY Buffalo. The problem it solved was mundane and eternal: several people shared a machine, some of them occasionally needed root, and handing out the root password to everyone was obviously terrible. sudo let a named user run a single command with superuser privileges, using their own password, while the system logged who did what.

At the time the name was honest. The tool did exactly one thing: it let you do something as the superuser. su, its older sibling from the earliest Unix, was likewise commonly read as superuser — you ran su, you became root.

Coggeshall later brought the code to the University of Colorado Boulder, where it was substantially reworked between 1986 and 1993. One of the people doing that reworking was a staffer named Todd C. Miller. Miller has now maintained sudo since 1994 — more than three decades of stewardship of a tool that ships in effectively every Linux distribution and macOS. One maintainer, thirty-plus years, billions of installs. The xz backdoor discourse of 2024 was about exactly this shape of dependency, and sudo is one of its oldest examples with a happier trajectory.

What does sudo actually stand for?

Three answers, all defensible, in chronological order:

• superuser do (1980) — the original reading, when the tool could only elevate to root, and su meant superuser.
• su "do" — the spelling the sudo project itself uses: sudo is su, plus do.
• substitute user, do — the modern reading. sudo grew the -u flag, which runs a command as any user, not just root. sudo -u postgres psql elevates you sideways, not up. In parallel, the su man pages redefined su as substitute user. Both halves of the old etymology moved, so the expansion moved with them.

The drift is the same pattern as grep, where the name preserves the tool's lineage rather than its function: the letters froze while the meaning underneath kept developing. Nobody renamed sudo when it stopped being only about the superuser. The name is a fossil with a living animal inside.

Why sudo won

The alternative model — everyone who needs root gets the root password — fails on the audit trail. With su, the log says root did it. With sudo, the log says which human did it, at what time, running what command. That single property is why sudo moved from a Buffalo campus convenience to the default privilege boundary of the Unix world, why "sudoers" became a file every sysadmin has broken at least once, and why the word escaped the terminal entirely — sudo make me a sandwich is a joke that only works because everyone in the room has typed the incantation.

It also explains the tool's longevity through the containerization era: even in a world of ephemeral machines, who elevated, when, to do what remains the question every incident review asks first.

The name will outlive the binary

Like grep, like k8s, the name is now more durable than any implementation detail. There are rewrites (doas on OpenBSD, sudo-rs in Rust), there are arguments about the sprawling feature set, and there will eventually be a successor. It will almost certainly describe itself the way everything in this lane describes itself: as a replacement for sudo. The four letters became the category.

sudo: born ~1980 at SUNY Buffalo as "superuser do," officially "su do," currently best read as "substitute user, do." The rare acronym that got more accurate by being reinterpreted.