3 ms·
If systemd could deny liblzma any syacall or filesystem access, that would have prevented it. It is only used to compress a data stream, it only needs read acce
by galangalalgol 3y ago
If systemd could deny liblzma any syacall or filesystem access, that would have prevented it. It is only used to compress a data stream, it only needs read access from one buffer, and write access to another. I realize there is no current mechanism for these granular permissions, that is what I was proposing be addressed.
- saagarjha 3y agoWe don't have the way to apply any restrictions on a per-library basis. This is generally quite difficult to do.
- pdimitar 3y agoI know. That's what's missing from our current technology. I am honestly tired of everyone collectively pretending this is not a problem. Periodically we get very grim reminders that it's in fact a problem, everyone pretends to care for a month then it's all back to where it was. It's depressing. (And no, this comment does not imply you are such. I am responding + ranting.)