News for hackers. Stuff that matters.
Re:Orphaning bcachefs-tools in Debian by viraptor on Saturday August 31, 2024 @08:30AM (#41408405)
Level of potentially messing up. If you have a chat app, relax the deps and it crashes - oh well. But if you have a tool which can cause data loss, you really want to be sure everyone's running what you tested.

It's similar to why restic (backup software) has official, static, reproducible binaries in their releases.

Re:Orphaning bcachefs-tools in Debian by JackSlateur on Saturday August 31, 2024 @08:43AM (#41408502)
And if my kernel crashes ?

And if whatever library bugged, oh well, random people can access my systems ?

And if my bgpd bugged, oh well, we just inject random routes et forward data randomly ?

Makes no sense.

Re:Orphaning bcachefs-tools in Debian by viraptor on Saturday August 31, 2024 @08:53AM (#41408549)
Your kernel has no external library dependencies.

Relaxing library requirements can introduce security issues when the dependency behaviour changes, so I'm not sure what the argument is.

If your bgp is bugged, yeah it sucks, but it's recoverable. We're using encrypted traffic these days to ensure that even captured traffic is safe.

The difference here is that data corruption is not recoverable.

Re:Orphaning bcachefs-tools in Debian by JackSlateur on Saturday August 31, 2024 @09:18AM (#41408683)
Linux uses at least libc
Re:Orphaning bcachefs-tools in Debian by viraptor on Saturday August 31, 2024 @09:20AM (#41408693)
Linux kernel doesn't use libc. Libc provides the interface for userspace to call the kernel.
Re:Orphaning bcachefs-tools in Debian by JackSlateur on Saturday August 31, 2024 @09:32AM (#41408764)
It does includes its headers (stdlib.h, at least), in various subsystems.
Re:Orphaning bcachefs-tools in Debian by viraptor on Saturday August 31, 2024 @09:50AM (#41408863)
In user space tools and tests only. The kernel part does not include stdlib.h anywhere. Nowhere where it matters in the context of "And if my kernel crashes?"
Re:Orphaning bcachefs-tools in Debian by JackSlateur on Saturday August 31, 2024 @10:44AM (#41409245)
You are right, thank you for the insight
Re:Orphaning bcachefs-tools in Debian by swinglock on Saturday August 31, 2024 @09:21AM (#41408698)
Oh well, it was probably just a crash in my Internet connected software where users can just sent inputs to be processed on my machine.

RCE would have been worse than file system bugs, as it leads directly to a superset of problems including potentially losing all your files.