4 ms·
Most of these things are simply untrue. The idea that homed is "incompatible with SSH" is preposterous. > Letting the init system talk to the network before us
by microcolonel 6y ago
Most of these things are simply untrue. The idea that homed is "incompatible with SSH" is preposterous.
> Letting the init system talk to the network before userspace has the ability to setup firewalls gives me the heebie jeebies.
Are these just random claims? The init system is userspace, and you can have any service wait for anything to access the network, including disabling the whole network target and triggering it manually.
- wtallis 6y ago> The idea that homed is "incompatible with SSH" is preposterous. And yet, any honest assessment of the pros and cons of the homed proposal has to discuss the impact on SSH users in the cons section.
- hedora 6y agoHere’s a remote exploit for the systemd DNS client: https://groups.google.com/d/topic/linux.debian.user/2KyNDWMjA5s https://groups.google.com/d/topic/linux.debian.user/2KyNDWMj... Here’s one for systemd DHCP: https://blog.erratasec.com/2018/10/systemd-is-bad-parsing-and-should-feel.html https://blog.erratasec.com/2018/10/systemd-is-bad-parsing-an... Firewalls wouldn’t help with either of these, in fairness.
- TheGoddessInari 6y agoOkay, how do you get the ssh folder contents to validate the remote user, if validating the user is required to decrypt? You can't. And the systemd answer is that you simply throw away ssh.