3 ms·

I would argue that's a systemd quirk due to D-Bus design. Environment variables for processes in Linux for the most part cannot be read by processes of non-roo

I would argue that's a systemd quirk due to D-Bus design. Environment variables for processes in Linux for the most part cannot be read by processes of non-root users, so out of the box they are "secure" for the user starting the process.

NewJazz 2y ago
They are also inherited by child processes. Though, so is the mount namespace.
pphysch 2y ago
Right, but dumping envs is a common debugging and attack vector.