<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 02/16/2017 06:06 AM, Philip Hands
wrote:<br>
</div>
<blockquote cite="mid:87tw7us8cv.fsf@whist.hands.com" type="cite">
<pre wrap="">Luke Kenneth Casson Leighton <a class="moz-txt-link-rfc2396E" href="mailto:lkcl@lkcl.net"><lkcl@lkcl.net></a> writes:
</pre>
<blockquote type="cite">
<pre wrap="">---
crowd-funded eco-conscious hardware: <a class="moz-txt-link-freetext" href="https://www.crowdsupply.com/eoma68">https://www.crowdsupply.com/eoma68</a>
On Thu, Feb 16, 2017 at 9:12 AM, Philip Hands <a class="moz-txt-link-rfc2396E" href="mailto:phil@hands.com"><phil@hands.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Luke Kenneth Casson Leighton <a class="moz-txt-link-rfc2396E" href="mailto:lkcl@lkcl.net"><lkcl@lkcl.net></a> writes:
</pre>
<blockquote type="cite">
<pre wrap=""> if systemd is so bloated and all-encompassing that it in effect
demands *all* privileges (it doesn't, but you know what i mean), it
utterly defeats the object of having the security system in the first
place.
</pre>
</blockquote>
<pre wrap="">
This appears to be another instance of you conflating the init process
with the project, but perhaps I'm misunderstanding you.
Are you claiming that systemd (the init) uses forks where sysvinit uses
execs?
</pre>
</blockquote>
<pre wrap="">
i don't know how you conclude i would say that when i don't mention
sysvinit. why would there be an implication of sysvinit being
involved when it's not mentioned?
</pre>
</blockquote>
<pre wrap="">
Well, if you're saying that systemd is bad, it must be bad relative to
something else since if the nearest likely alternative e.g. sysvinit does
pretty-much the same thing then you're really saying very little.
The Daily Mail will cheerfully tell you that Coffee causes cancer, which
is probably true, but only at about the same rate as pretty much
everything else one could imagine consuming, so ... no news.
</pre>
</blockquote>
<br>
Coffee cures cancer? Sounds like you have been listening to todd
talks too much.<br>
<br>
sorry couldn't resist. ;)<br>
<br>
<blockquote cite="mid:87tw7us8cv.fsf@whist.hands.com" type="cite">
<blockquote type="cite">
<pre wrap="">i'm saying that SE/Linux's security model is based on the isolation
of exec. but, that if the sheer overwhelming number of programs being
exec'd is so huge, it becomes pretty pointless to even *have* such
isolation.
</pre>
</blockquote>
<pre wrap="">
Systemd execs a lot of things by dint of it being the system's init,
does it not? This sounds almost like you're claiming that SElinux isn't
capable of modeling any implementation of the init task.
That's why I was trying to tease out something about what makes this
unique to sytemd from you. Hence the mention of sysvinit.
</pre>
<blockquote type="cite">
<pre wrap=""> i provide this as a guide *without* spending the time to assess
actual instances... because it's not my job to do so. and, also, with
the sheer overwhelming number of *other* factors (all of them
individually low-probability events), when combined using
demster-shafer information theory, you don't *need* to go in-depth: to
do so is completely pointless.
basically i'm saying, phil, knocking down one skittle by spending the
time to track down one "hole" in what i say, is pointless. the entire
design and deployment of systemd is like a dam made of swiss cheese.
there simply aren't enough fingers to plug all the hundreds of
flaws... so there's little point in trying. this response (one of a
long line of reasons why i will never *ever* use systemd) is just one
response from a different angle, one that i have had at least one
person publicly express gratitude for taking the time to explain, and
one privately. who knows well enough and is old enough and ugly
enough *not* to get involved in the cluster-fuck known as systemd.
</pre>
</blockquote>
<pre wrap="">
I'm not trying to knock down skittles -- I'm trying to see whether what
you're saying has any substance behind it, or is simply hand waving.
Cheers, Phil.</pre>
</blockquote>
<br>
We should trust Luke okay? now can we all please drop this entire
subject now? please?<br>
<br>
<blockquote cite="mid:87tw7us8cv.fsf@whist.hands.com" type="cite">
<pre wrap="">
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
arm-netbook mailing list <a class="moz-txt-link-abbreviated" href="mailto:arm-netbook@lists.phcomp.co.uk">arm-netbook@lists.phcomp.co.uk</a>
<a class="moz-txt-link-freetext" href="http://lists.phcomp.co.uk/mailman/listinfo/arm-netbook">http://lists.phcomp.co.uk/mailman/listinfo/arm-netbook</a>
Send large attachments to <a class="moz-txt-link-abbreviated" href="mailto:arm-netbook@files.phcomp.co.uk">arm-netbook@files.phcomp.co.uk</a></pre>
</blockquote>
<br>
</body>
</html>