News for hackers. Stuff that matters.

A comment on System Down: A systemd-journald exploit. Parent comment

Re:System Down: A systemd-journald exploit by dijit on Thursday January 10, 2019 @11:32AM (#18875108)
The "sysvinit" binary package has had a total of 2 bug reports tagged "security" filed in Debian's bug tracker. That's over the entire history of the package that goes back to at least 2004.

If I extend the search to all packages built from the "sysvinit" source (which includes packages like initscripts and sysvinit-utils), the count increases to 8. (source: https://www.debian.org/Bugs. I'm not linking to exact queries since they take quite some time and HN has a tendency of taking down Debian's bug tracker)

[ Parent | on HN ]
Re:System Down: A systemd-journald exploit by nailer on Thursday January 10, 2019 @11:38AM (#18875192)
Also crond, atd, and various log manipulation tools that systemd replaces.
[ Parent | on HN ]
Re:System Down: A systemd-journald exploit by zzzcpan on Thursday January 10, 2019 @11:40AM (#18875211)
It doesn't replace them, it just doesn't use them.
[ Parent | on HN ]
Re:System Down: A systemd-journald exploit by dijit on Thursday January 10, 2019 @11:41AM (#18875223)
It supplants them with the same functionality.

That's literally the definition of replacement.

[ Parent | on HN ]
Re:System Down: A systemd-journald exploit by nailer on Friday January 11, 2019 @08:33AM (#18883450)
Indeed. Not complaining - I don't care for HN karma - but it is very odd that an easily searchable fact is being downvoted on a technical forum.
[ Parent | on HN ]
Re:System Down: A systemd-journald exploit by yarrel on Thursday January 10, 2019 @01:20PM (#18876403)
It provides inferior code and interfaces that are used instead of them.

So you're correct, in a way.

[ Parent | on HN ]