Systemd Opened Security Hole in Linux, VPNs Could Be Compromised

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by zzzcpan on Saturday December 07, 2019 @11:24AM (#21731050)

> If you look at the old scripts-and-daemons hairball that systemd replaces, it has a lot of security warts too.

Not even close. Scripts were always memory safe and limitations of shell didn't allow to go crazy with things and introduce security issues left and right.

[ Parent | on HN ]

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by dfox on Saturday December 07, 2019 @11:39AM (#21731119)

Whether shell is memory-safe is completely irrelevant as the language has more significant safety issues with regards to quoting, eval and such.

And second reason why it is irrelevant is that the traditional bunch-of-shell-scripts init system does not process any kind of untrusted input.

[ Parent | on HN ]

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by zzzcpan on Saturday December 07, 2019 @12:00PM (#21731242)

It does deal with some untrusted input, often not directly in shell though, but through other tools.

[ Parent | on HN ]

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by bonzini on Saturday December 07, 2019 @11:50AM (#21731188)

Instead you had quoting bugs where the shell scripts ended up rm -rf /'ing your machine.

[ Parent | on HN ]