Here’s a remote exploit for the systemd DNS client: https://groups.google.com/d/topic/linux.debian.user/2KyNDWMj...
Here’s one for systemd DHCP: https://blog.erratasec.com/2018/10/systemd-is-bad-parsing-an...
Firewalls wouldn’t help with either of these, in fairness.
Re:Operating Systems Without Systemd
by TheGoddessInari on Tuesday May 05, 2020 @03:26AM
(#23077409)
Okay, how do you get the ssh folder contents to validate the remote user, if validating the user is required to decrypt?
You can't. And the systemd answer is that you simply throw away ssh.
> The idea that homed is "incompatible with SSH" is preposterous.
And yet, any honest assessment of the pros and cons of the homed proposal has to discuss the impact on SSH users in the cons section.
> Letting the init system talk to the network before userspace has the ability to setup firewalls gives me the heebie jeebies.
Are these just random claims? The init system is userspace, and you can have any service wait for anything to access the network, including disabling the whole network target and triggering it manually.