As a sysadmin, I like systemd. The built-in service watchdog is really nice, and I like being able to override service file options without replacing the servic

As a sysadmin, I like systemd. The built-in service watchdog is really nice, and I like being able to override service file options without replacing the service entirely. I haven't seen many vulnerabilities in the PID 1 part of systemd that concerned me. The last vuln I recall was the UID parsing issue, which isn't really exploitable. The systemd-resolved vuln was pretty bad, but that's an optional component that I've never used anyway. (It's not used by default on Debian.)