Re:System Down: A systemd-journald exploit
by lousken on Thursday January 10, 2019 @11:53AM
(#18875386)
No I didn't but I can read bash so I can audit that myself and in fact over the years I did read most of those scripts. Also it's just a few lines of code compared to systemd so even one person can do it.
[ Parent
| on HN ]
Re:System Down: A systemd-journald exploit
by joelthelion on Thursday January 10, 2019 @12:01PM
(#18875476)
> I can read bash
Lol. I'm sure you're the only person on earth who can think of all the corner conditions when reading a bash script.
Auditing a shell script for security is near impossible to do.
Re:System Down: A systemd-journald exploit
by lousken on Thursday January 10, 2019 @12:15PM
(#18875635)
I never said that, at the end of the day it's the same thing with audits, you can have 50 people auditing systemd and they won't find every single mistake either. What I'm saying is that simplicity limits room for mistakes and it gives more people chance to look at it and play with it. The concept is fairly straightforward.
Re:System Down: A systemd-journald exploit
by zbentley on Friday January 11, 2019 @08:21AM
(#18883362)
> I can read bash
And I can read systemd unit files. That doesn't tell me anything about the security of the system in charge of running them.
https://www.cvedetails.com/product/21050/GNU-Bash.html?vendo...