3 ms·
> but I'll bet there are some lovely bugs to be discovered. https://github.com/systemd/systemd/issues/6237 https://github.com/systemd/systemd/issues/6237 > sy
by ardy42 8y ago
> but I'll bet there are some lovely bugs to be discovered.
https://github.com/systemd/systemd/issues/6237 https://github.com/systemd/systemd/issues/6237
> systemd can't handle the process previlege that belongs to user name starts with number, such as 0day
Apparently systemd will run services owned by users with a name that starts with a digit as root.
- giornogiovanna 8y agoI always wonder how bugs (is this a bug?) like that, and that one time when you could log into macOS by repeatedly pressing "Login"[0] even happen. Like, what's the logic behind that? [0]: https://threatpost.com/critical-apple-login-bug-puts-macos-high-sierra-systems-at-risk/129028/ https://threatpost.com/critical-apple-login-bug-puts-macos-h...
- mr_toad 8y agoIn my experience it’s unwarranted assumptions about data formats (e.g. usernames aren’t numbers) and not checking the specs. Also, putting off coding for corner cases, and then forgetting to. I’ve been guilty of doing both.
- chrisseaton 8y agoReading the issue it looks like Poettering confidently replies that these aren't valid user names, but then when he's challenged to defend that he tries to walk it back to being just not a good idea. So that's how it happens. People make unwarranted assumptions.
- bjoli 8y agoJesus that is a depressing read. - "some configurations might lead to serious vulnerabilities" - "I can't reproduce on fedora. Not a bug".