3 ms·
This is how I feel about systemd's approach of using badness when configuring their ever-growing badness-oriented .service files. Ideally, you should be using
by egberts1 3y ago
This is how I feel about systemd's approach of using badness when configuring their ever-growing badness-oriented .service files.
Ideally, you should be using goodness (inclusion of privilege) instead.
Same goodness things we do with default-deny firewall, and file permission.
- eliaspro 3y agoThis isn't so much systemd's fault, but more one of POSIX/Linux. Processes aren't spawned without any privileges at all and then get them assigned selectively (thats what's done on Fuchsia/Zircon: https://fuchsia.dev/fuchsia-src/concepts/process/jobs https://fuchsia.dev/fuchsia-src/concepts/process/jobs ), but instead mostly inherit their privileges and resources from their parents.