Avatar

Unsafe

Unsafe@discuss.online
Joined
2 posts • 36 comments
Direct message

Misconfiguration is possible in any software. It’s not specific to sysvinit or systemd-init. Selinux was created to solve this.

permalink
report
parent
reply

I deleted it. No need for two almost identical posts to exist.

permalink
report
parent
reply

the added difficulties of making it system agnostic did not compensated for the low user base

  • 2003: Udev was launched, providing support for musl, non-systemd distros, and others.
  • 2004: NetworkManager was launched, with Udev as a crucial dependency.
  • 2006: Dbus was created without dependencies on distro-specific packages.
  • 2009: Dbus becomes a dependency for NetworkManager.
  • 2010: Red Hat introduces systemd, with core components including logind, journald, and timers.
  • 2012: Developers made udev less compatible with old kernels, musl-based, and non-systemd Linux distros by merging it with systemd. You can find more information about this here: https://lwn.net/Articles/490413, https://lwn.net/Articles/529314/
  • 2017: PipeWire was launched, with logind as a dependency.
  • 2017: Reimplementations of the bus protocol called dbus-broker were launched. Its compatibility launcher requires systemd.
  • 2020: After systemd had already been adopted by all major distros, systemd-tmpfiles gained the ability to be built as a standalone executable.
  • 2022: WirePlumber was launched, with pipewire as a hard dependency.

Looks like Red Hat makes everything they can systemd-dependent. Including Gnome.

permalink
report
parent
reply

Compare it to vulnerabilities found in SysVinit, which was as common as systemd-init is now. There were no similar bugs, that would allow crashing an entire system just by executing a single command.

permalink
report
parent
reply

We know.

permalink
report
parent
reply

Really? Didn’t known. Lemmy.today seems to not work properly on mobile apps.

permalink
report
parent
reply

The thing is that it can work. Which shown by eudev. Looks like it’s important for Red Hat to make everyone dependent on SystemD suit.

permalink
report
parent
reply

It’s a matter of probability. Probability of discovering vulnerabilities in multiple tools doing same thing is higher than in just one.

permalink
report
parent
reply

See the answer on your logind statement.

permalink
report
parent
reply