News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by iforgotpassword on Friday March 29, 2024 @03:05PM (#39867766)
What's the point of your implementation? systemd is totally modular, you can use just the init system without networkd, timesyncd, resolved, nspawn, whatever else I forgot about.

If you want you can just use systemd as PID1 for service management and enjoy a sane way to define and manage services – and do everything in archaic ways like 20 years ago.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by gavinhoward on Friday March 29, 2024 @03:28PM (#39868029)
There are two points to the implementation:

* Choice. If I have a separate implementation, my users do not have to be subject to systemd's choices. And I do not either.

* The same implementation will have the same bugs, so in the same way that redundant software has multiple independent implementations, having an independent implementation will avoid the same bugs. It may have different bugs, sure, but my goal would be to test like SQLite and achieve DO-178C certification. Or as close as I could, anyway.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by iforgotpassword on Friday March 29, 2024 @04:13PM (#39868512)
I'd assume chances of monetizing this are incredibly low. There already is an init system that understands systemd unit files, the name escapes my mind unfortunately. DO-178C might be a selling point literally, but whether there's enough potential customers for ROI is questionable.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by gavinhoward on Friday March 29, 2024 @04:25PM (#39868622)
I unfortunately agree with you. Hence why it's on the backburner.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by JdeBP on Saturday March 30, 2024 @07:46AM (#39873934)
Ahem!

* https://jdebp.uk/Softwares/nosh/guide/converting-systemd-uni...

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Repulsion9513 on Friday March 29, 2024 @10:45PM (#39871388)
No, you can't. Systemd might be somewhat modular; the things distros ship which depend on it are not.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by iforgotpassword on Saturday March 30, 2024 @03:03AM (#39872503)
Well some distros might force more components upon you but thas hardly systemd's fault. Same if some software decides to make use of another component of systemd - then that's their choice, but also there are alternatives. The only thing that comes to mind right now would be something like GNOME which requires logind, but all other "typical" software only wants systemd-the-init-system if anything. You can run Debian just fine with just systemd as an init system and nothing else.
[ Parent | on HN ]