• Whostosay@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 hours ago

    Probably correct. I’m not going to pretend to have the know how, but I would assume that if this was exploited widely, we’d have heard about it.

    Would it be a great target? Maybe. Attack it. Show us all the love of contributing in hardening it.

      • Whostosay@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        8 hours ago

        I did just read I think 90% of that, and it just seems like that person is sour about systemd in general.

        I agree it’s not unix/Linux philosophy but it’s the best we have.

        Does it do too much? Maybe. I haven’t seen that exploited on a large scale in the real world, but it’s definitely a golden key.

        There are options. But it’s just one of those things. You’re pissing in the wind unless you’re willing to write it yourself. You can use non systemd distros or even use bsd.

        All that said, you’re absolutely right to be concerned, but speaking on it like it’s an active vulnerability is dangerous.

        It’s also evident that it’s reliant on the software you run, it’s not systemd that’s giving you away, it’s your application that you chose to install that’s abusing or neglegent of systemd’s access.