System Down: A systemd-journald exploit

Re:System Down: A systemd-journald exploit by lousken on Thursday January 10, 2019 @11:50AM (#18875339)

No, but it's far less complex than systemd to the point where you can audit the code yourself and it's battle tested over the years. Also because it's so simple it was shown to us at the university so we've got essential understanding of how it works and I think they're still explaining it instead of systemd.

[ Parent | on HN ]

Re:System Down: A systemd-journald exploit by josteink on Thursday January 10, 2019 @02:50PM (#18877385)

But systemd is more than just init. It replaces for instance daemontools, restartd or monit.

Are you saying you can trivially audit those?

[ Parent | on HN ]

Re:System Down: A systemd-journald exploit by lousken on Thursday January 10, 2019 @03:48PM (#18877983)

Does it fully replace monit? Could you link me more info? From what I could find I didn't see anything like free disk space warnings, web interface etc.

[ Parent | on HN ]

Re:System Down: A systemd-journald exploit by josteink on Friday January 11, 2019 @06:04AM (#18882561)

> Does it fully replace monit?

Not fully, no but as far as I can tell, it has overlapping responsibilities.

My main thought when mentioning it, was automatic restart of services in the case of failure.

[ Parent | on HN ]

Re:System Down: A systemd-journald exploit by maemilius on Thursday January 10, 2019 @03:51PM (#18878007)

That's a fair point. However, the parent was responding to whether init - in particular - had been audited. So, bringing up other, larger projects that systemd subsumes is a bit disingenuous, imo.

[ Parent | on HN ]