Then again, I'm putting together a CTF vulnimage and it's definitely going to be systemd-based. Bonus if you pwn it that way!https://twitter.com/marsroverdriver/status/881550176384503808 …
-
>(for isolation) either namespaces or systemd user services. https://wiki.archlinux.org/index.php/Systemd/User … would you dynamically generate a init.d shellscript?
Just because there are other ways of doing it doesn't mean it's *wrong* and doesn't mean the resulting vuln isn't systemd's fault
-
-
Generating files like these would be really stupid on other init systems too, shooting yourself in the foot is not systemd-exclusive.
-
especially considering how hilariously fragile setuid stuff and environment sanitisation in sysvinit was
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.