Re: [systemd-devel] "CVE-2013-4392: TOCTOU race condition when updating file permissions and SELinux security contexts" still an issue

2018-03-26 Thread Lennart Poettering
On Sa, 24.03.18 22:54, Michael Biebl ([email protected]) wrote: > Hi, > > the Debian systemd package has an open bug report > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 > about > CVE-2013-4392: TOCTOU race condition when updating file permissions > and SELinux security contexts > >

Re: [systemd-devel] how to login into a container booting with a minimal 'debian distro unstable' via nspawn

2018-03-26 Thread Simon McVittie
On Sun, 25 Mar 2018 at 19:50:24 +0300, Mantas Mikulėnas wrote: > Does debootstrap actually create a passwordless root account? No, it creates a system with all system accounts locked[1] (including root, daemon, bin, www-data, etc.) and no non-system accounts. There is no single correct answer for

[systemd-devel] systemd-networkd-wait-online should know if there is anything to wait for

2018-03-26 Thread Dimitri John Ledkov
Hello, When systemd-networkd-wait-online was originally introduced, it was the only tool that correctly waited and blocked the boot, until after networking is configured. These days, however, all/most network configurations tools ship appropriate wait-online integration. E.g. there is network-man

Re: [systemd-devel] start service in multi-user.target but don't stop it on isolate

2018-03-26 Thread Alexander 'Leo' Bergolth
On 03/20/2018 10:34 AM, Jérémy Rosen wrote: > naive question, but why are you not using systemd's handling of hardware > daemon (see man:system.conf for how to activate it) The reason is laziness. ;-) Since I am suffering from IO-subsystem related kernel bugs, I need to detect IO lockups. AFAIK s