News for hackers. Stuff that matters.

A comment on Linux Hardening Guide. Parent comment

Re:Linux Hardening Guide by easterncalculus on Thursday December 31, 2020 @01:28PM (#25595458)
Don't forget that if you run the wrong command, you can brick your entire computer: https://github.com/systemd/systemd/issues/2402
[ Parent | on HN ]
Re:Linux Hardening Guide by sliken on Thursday December 31, 2020 @02:06PM (#25595925)
The CVE trend for systemd is worrisome as well:

https://www.cvedetails.com/product/38088/Freedesktop-Systemd...

Disappointing that an init system is on the network at all.

[ Parent | on HN ]
Re:Linux Hardening Guide by Gracana on Thursday December 31, 2020 @02:05PM (#25595919)
That really isn't systemd's fault. Software needs to manage the efi variables, so systemd mounts efivarfs writable.
[ Parent | on HN ]
Re:Linux Hardening Guide by easterncalculus on Thursday December 31, 2020 @02:19PM (#25596083)
What software actually needs to repeatedly write to these variables? Systemd itself does, but there was absolutely a world before having this option on by default. Grub and such can just unmount after they are done.
[ Parent | on HN ]