Re: [systemd-devel] systemd vulnerability detection

2020-04-28 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Apr 29, 2020 at 08:53:23AM +0530, Amish wrote: > > On 29/04/20 1:00 am, Lennart Poettering wrote: > >Please see: > > > >https://systemd.io/SECURITY/ > > > >... > > > >Lennart > > On a side note, phrasing on the site needs to be changed. https://github.com/systemd/systemd/pull/15632 ? Zb

Re: [systemd-devel] systemd vulnerability detection

2020-04-28 Thread Amish
On 29/04/20 1:00 am, Lennart Poettering wrote: Please see: https://systemd.io/SECURITY/ ... Lennart On a side note, phrasing on the site needs to be changed. It almost makes you click "public" link instead of "non-public" e-mail link. It should be something like this: If you discove

Re: [systemd-devel] systemd vulnerability detection

2020-04-28 Thread Lennart Poettering
On Di, 28.04.20 21:35, Fuat Bölük (mek...@fuatboluk.com.tr) wrote: > Hello there. I detected a vulnerability in systemd software. this > vulnerability exists in all systemd versions. vulnerability can be > manipulated by local users and root user rights can be obtained. > > As soon as I publicly p

[systemd-devel] systemd vulnerability detection

2020-04-28 Thread Fuat Bölük
Hello there. I detected a vulnerability in systemd software. this vulnerability exists in all systemd versions. vulnerability can be manipulated by local users and root user rights can be obtained. As soon as I publicly publicize this vulnerability, all servers running systemd will remain vulnerab

Re: [systemd-devel] How does KillSignal interact with TimeoutStopSec in systemd?

2020-04-28 Thread Andrei Borzenkov
27.04.2020 08:43, Debraj Manna пишет: Can someone let me know the following about systemd service shutdown sequence 1. If I have specified KillSignal=SIGTERM then how does this interact this TimeoutStopSec ? Does this mean that during shutdown of service, first SIGTERM will be s

[systemd-devel] local-fs and remote-fs targets / passive active units

2020-04-28 Thread Thomas HUMMEL
Hello, Reading systemd.special(7) and using systemctl show -p After,Before,Wants,Requires ..., I tried to figure out if my following understanding is true: doc says: - an active target is when the consumer pulls in the dependency (ex: network-online.target pulled in by nfs-mountd.service)