4 ms·
Switching from shell to C is a problem from DoD users - you aren't allowed to have a compiler installed on a production machine, so to edit your init process (I
by count 15y ago
Switching from shell to C is a problem from DoD users - you aren't allowed to have a compiler installed on a production machine, so to edit your init process (I guess they aren't scripts anymore!), you'd have to have a separate machine to do the compiling.
- zb 15y agoSystemd services are configured with a .service file, which is a text file (but not a shell script). I don't know why the author made the bizarre suggestion that anybody would start tinkering with the source of systemd itself in order to configure services, and it would be impolite to speculate. Suffice to say that nobody does this. Certainly you can take advantage of more systemd features by modifying the source of the service to explicitly support them; however, this is not something users/sysadmins should ever need to do themselves.
- rwmj 15y agoThis isn't how it works -- you can use shell scripts within systemd, it's just that the so-called standard init scripts have been replaced. Note that old-style SysV init scripts weren't really editable in most cases. They were supposed to stick to a rigid set of standards (which they often didn't, causing lots of bugs), and edits made to them might be silently reverted during an upgrade. For this reason, most distros recommend /etc/sysconfig/* files for persistent configuration of init scripts, which systemd also uses (or editing the textual foo.service file).
- count 15y agoInteresting, thanks.
- 4ad 15y agoNot installing compilers on production machines is a relic from 1990 that doesn't impact security in any meaningful way. If I have access to your machine I can upload a compiler and/or I can upload binaries generated by a compiler at my end of the pipe.
- binarycrusader 15y agoRelic or not, that's the way things are in many businesses and governments.
- Someone 15y agoI think systems that do not have a compiler will try hard to make it impossible for normal users to do chmod +x, too. Users likely will not have a login shell, and they will have a umask set to prevent creation of executable files.
- alexchamberlain 15y agoIs it not more that compiling on a different machine should force you to test on that machine, thus uploading a known good binary to production?