LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 06-24-2017, 01:41 AM   #1
Xeratul
Senior Member
 
Registered: Jun 2006
Location: UNIX
Distribution: FreeBSD
Posts: 2,657

Rep: Reputation: 255Reputation: 255Reputation: 255
Can SystemD endanger your data?


Hello,

With the numerous discussion about SystemD, there is a point which still remain not sufficiently discussed.

Can SystemD endanger your data?

Last edited by Xeratul; 06-24-2017 at 01:43 AM.
 
Old 06-24-2017, 10:38 AM   #2
Myk267
Member
 
Registered: Apr 2012
Location: California
Posts: 422
Blog Entries: 16

Rep: Reputation: Disabled
Can systemd cause nasal demons?

Quote:
Can SystemD endanger your data?
For what interpretation of endanger and data?

The journal might endanger your log data if it becomes corrupt and you don't actually log the data somewhere. Though, it's arguable whether this is the journal's fault.

Otherwise... I don't see how?

Last edited by Myk267; 06-24-2017 at 11:00 AM.
 
Old 06-24-2017, 10:43 AM   #3
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
I heard systemd was found to cause cancer in lab rats!

Edit: Sorry, a more sane response:
If it did then Red Hat must want to lose customers, mustn't they?!
 
Old 06-29-2017, 08:28 AM   #4
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,573
Blog Entries: 19

Rep: Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452
Quote:
Originally Posted by Xeratul View Post
Hello,

With the numerous discussions about systemd, there is a point which still remain not sufficiently discussed.

Can systemd endanger your data?
I would have said no, but see this article.

Last edited by hazel; 06-29-2017 at 08:30 AM.
 
Old 06-29-2017, 09:03 AM   #5
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
Absolutely, "Yes!!"

"systemd" is, in fact, an enchanted toadstool, secretly produced by Russian Hackers working for the Wicked Witch of the West!

It can turn all of your precious data into a frog!

 
Old 06-29-2017, 09:48 AM   #6
justmy2cents
Member
 
Registered: May 2017
Location: U.S.
Distribution: Un*x
Posts: 237
Blog Entries: 2

Rep: Reputation: Disabled
Does systemd have a webserver if I may ask in this thread?
 
Old 06-29-2017, 09:51 AM   #7
Myk267
Member
 
Registered: Apr 2012
Location: California
Posts: 422
Blog Entries: 16

Rep: Reputation: Disabled
Quote:
Originally Posted by hazel View Post
I would have said no, but see this article.
I'm surprised that news is flying under the radar, here at LQ.
 
Old 06-29-2017, 10:04 AM   #8
cynwulf
Senior Member
 
Registered: Apr 2005
Posts: 2,727

Rep: Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367
Well there was this one earlier this year: https://cve.mitre.org/cgi-bin/cvenam...CVE-2016-10156 (fixed on the quiet)

And now this one: http://www.openwall.com/lists/oss-security/2017/06/27/8

Quote:
Can SystemD endanger your data?
The answer is "possibly". Though Linux might endanger your data as well.
 
Old 06-29-2017, 11:37 AM   #9
DavidMcCann
LQ Veteran
 
Registered: Jul 2006
Location: London
Distribution: PCLinuxOS, Debian
Posts: 6,142

Rep: Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314Reputation: 2314
The article that Hazel linked to points out that the service that can be crashed is not enabled in Debian, and so presumably in Debian-based distros, while Red Hat has a fix.
 
Old 06-29-2017, 11:50 AM   #10
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Quote:
Originally Posted by justmy2cents View Post
Does systemd have a webserver if I may ask in this thread?
The question makes no sense.
Systemd is an innit system -- if you're intersted it's worth reading up on as it's almost certainly going to be the default of the major distributions (Slackware, possibly, aside) for the next few years at least.
 
Old 06-29-2017, 12:54 PM   #11
Xeratul
Senior Member
 
Registered: Jun 2006
Location: UNIX
Distribution: FreeBSD
Posts: 2,657

Original Poster
Rep: Reputation: 255Reputation: 255Reputation: 255
Quote:
Originally Posted by sundialsvcs View Post
Absolutely, "Yes!!"

"systemd" is, in fact, an enchanted toadstool, secretly produced by Russian Hackers working for the Wicked Witch of the West!

It can turn all of your precious data into a frog!

Seriously, there is of course a big risk.

At least, talented group of software developer talk about it as possible toxic linux software, i.e. a menace which is spreading like a disease throughout the Linux world.
 
Old 06-29-2017, 12:59 PM   #12
justmy2cents
Member
 
Registered: May 2017
Location: U.S.
Distribution: Un*x
Posts: 237
Blog Entries: 2

Rep: Reputation: Disabled
Quote:
Originally Posted by 273 View Post
The question makes no sense.
Systemd is an innit system -- if you're intersted it's worth reading up on as it's almost certainly going to be the default of the major distributions (Slackware, possibly, aside) for the next few years at least.
I apologize let me rephrase my question, why does systemd require an http server? That doesn't sound like a good idea..
https://lists.fedoraproject.org/pipe...er/172513.html
 
Old 06-29-2017, 01:10 PM   #13
ntubski
Senior Member
 
Registered: Nov 2005
Distribution: Debian, Arch
Posts: 3,781

Rep: Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081
Quote:
Originally Posted by justmy2cents View Post
I apologize let me rephrase my question, why does systemd require an http server? That doesn't sound like a good idea..
https://lists.fedoraproject.org/pipe...er/172513.html
Look up:
https://lists.fedoraproject.org/pipe...er/172163.html

Quote:
Originally Posted by Lennart Poettering
On Mon, 08.10.12 14:50, Petr Pisar (ppisar at redhat.com) wrote:

> Am I the only one who raised his eyebrow when today's systemd update to
> systemd-194-1.fc18 pulled in libmicrohttpd and qrencode-libs?

The live-syncing logging logic that is available in 184 as a preview is
based on JSON and HTTP (in order to build as much on existing standards
as possible, and get best integration with other systems). In order to
keep the footprint low we decided to use an existing embeddable minimal
HTTP engine for that, rather than writing our own. Correspondingly the
microhttpd library is only pulled in by the journal gateway daemon,
which is responsible for the HTTP iface to the journal. We thought about
splitting this off into an individual package (and it would be really
easy to still do that), but as the code of libmicrohttpd is minimal, and
it doesn't pull in any deps beyond what is already in the minimal
installation set we didn't bother so far. Note that the code is not
enabled unless people do "systemctl enable
systemd-journal-gatewayd.service".

The QR code stuff is for showing a scannable QR code for the FSS sealing
key. It's a gimmick. In order to minimize footprint we actually made
sure that the qrencode pacakge got split up in order not to pull in any
additional packages into the basic set. It too is a really minimal dep,
pulling nothing else in that wasn't in the minimal installation set
already. Here too, was the option to implement our own thing, our own QR
encoding code or just use the existing solution whose code is quite OK,
whose deps are minimal, and which is quite well tested already. With the
qrencode package split-up we were quite happy with having a dep on it.
 
Old 06-29-2017, 01:10 PM   #14
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Quote:
Originally Posted by justmy2cents View Post
I apologize let me rephrase my question, why does systemd require an http server? That doesn't sound like a good idea..
https://lists.fedoraproject.org/pipe...er/172513.html
As somebody who removes the likes of avahi-daemon from my system that is interesting -- do you have a link to the original post describing the issue rather than the discussion? I can't seem to see any facts in there.
 
Old 06-29-2017, 01:23 PM   #15
Xeratul
Senior Member
 
Registered: Jun 2006
Location: UNIX
Distribution: FreeBSD
Posts: 2,657

Original Poster
Rep: Reputation: 255Reputation: 255Reputation: 255
Quote:
Originally Posted by justmy2cents View Post
I apologize let me rephrase my question, why does systemd require an http server? That doesn't sound like a good idea..
https://lists.fedoraproject.org/pipe...er/172513.html
Systemd is indeed considered as a danger.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: systemd 230 Launches with DNSSEC Enabled by Default in systemd-resolved LXer Syndicated Linux News 0 05-22-2016 11:41 AM
Can't access full journalctl from script via systemd service even though user is in systemd-journal group iwtbf Linux - Newbie 0 02-19-2016 02:44 PM
LXer: FCC Rules Endanger Open Source Wireless Router Firmware LXer Syndicated Linux News 0 09-28-2015 03:20 PM
Boot Delay 30min: systemd-analyze blame systemd-tmpfiles-setup.service BGHolmes Fedora 0 07-27-2011 09:02 AM
What's a good linux distribution for audio (one that won't endanger my hearing) Pooped Linux - Distributions 5 01-23-2010 07:41 AM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 10:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration