I love how Poettering insists that ignoring "syntactically invalid" usernames (according to him, not a standard) and running as root is A-OKhttps://twitter.com/diodesign/status/881297275070234624 …
-
Better yet, default behaviour on no User directive or invalid username in a unit gets a root service
No User directive I can see (that's not great but understandable), but not failing hard on "invalid" values is ridiculous.
-
-
*Especially* when they *are* valid usernames that you can create on a system (on some distros at least). Impedance mismatch = security fail.
-
Those are actually valid names according to some standards. Heck, even dots and underscores are allowed.
- Show replies
New conversation -
-
-
Yep, I can understand no user directive but would still prefer hard fail but all other cases should hard fail not give root
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.