Re: Embarrassing security bug in systemd
On Sat 09 Dec 2017 at 07:52:56 +0000, Jonathan Dowland wrote:
> On Fri, Dec 08, 2017 at 07:57:03PM +0000, Brian wrote:
> > > That's a good point.
> >
> > Not really. systemd doesn't stop providing a single place to define a
> > consistent policy because a set of users do not use it.
>
> That's not the point I thought was good: the point is, in Debian,
> systemd is optional. As an Operating System, consistency is a good
> thing, and so if we have a consistent policy for anything, it would be
> nice if that was not dependent on optional software. On the other hand,
> nobody has put together an alternative to achieve the same thing, and we
> are all volunteers.
Consistencey can be achieved by not installing policykit. The OP appears
to have chosen the wrong target.
> > A bug report against the release notes with a patch is always worth a
> > try.
>
> The relevant release notes would be the ones for the release that
> introduced systemd which has been and gone.
Nothing is irreversible. A proposed erratum, then.
--
Brian.
Reply to: