Re: [systemd-devel] systemd vulnerability detection

2020-04-28 Thread Amish
On 29/04/20 1:00 am, Lennart Poettering wrote: Please see: https://systemd.io/SECURITY/ ... Lennart On a side note, phrasing on the site needs to be changed. It almost makes you click "public" link instead of "non-public" e-mail link. It should be something like this: If you

Re: [systemd-devel] systemd vulnerability detection

2020-04-28 Thread Lennart Poettering
On Di, 28.04.20 21:35, Fuat Bölük (mek...@fuatboluk.com.tr) wrote: > Hello there. I detected a vulnerability in systemd software. this > vulnerability exists in all systemd versions. vulnerability can be > manipulated by local users and root user rights can be obtained. > > As soon as I publicly

[systemd-devel] systemd vulnerability detection

2020-04-28 Thread Fuat Bölük
Hello there. I detected a vulnerability in systemd software. this vulnerability exists in all systemd versions. vulnerability can be manipulated by local users and root user rights can be obtained. As soon as I publicly publicize this vulnerability, all servers running systemd will remain

Re: [systemd-devel] How does KillSignal interact with TimeoutStopSec in systemd?

2020-04-28 Thread Andrei Borzenkov
27.04.2020 08:43, Debraj Manna пишет: Can someone let me know the following about systemd service shutdown sequence 1. If I have specified KillSignal=SIGTERM then how does this interact this TimeoutStopSec ? Does this mean that during shutdown of service, first SIGTERM will be

[systemd-devel] local-fs and remote-fs targets / passive active units

2020-04-28 Thread Thomas HUMMEL
Hello, Reading systemd.special(7) and using systemctl show -p After,Before,Wants,Requires ..., I tried to figure out if my following understanding is true: doc says: - an active target is when the consumer pulls in the dependency (ex: network-online.target pulled in by nfs-mountd.service)