Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.os.linux > #51517

Re: Anyone know what this nginx error is about?

From Dan Espen <dan1espen@gmail.com>
Newsgroups alt.os.linux, comp.os.linux.misc
Subject Re: Anyone know what this nginx error is about?
Date 2018-11-04 11:17 -0500
Organization A noiseless patient Spider
Message-ID <prn62h$7gl$1@dont-email.me> (permalink)
References (3 earlier) <0cydnVbltbuDd0DGnZ2dnUU7-T-dnZ2d@giganews.com> <g47pbrF4jk7U1@mid.individual.net> <prmkgu$r9p$2@dont-email.me> <prmpno$lli$2@dont-email.me> <g48adjF8a3rU1@mid.individual.net>

Cross-posted to 2 groups.

Show all headers | View raw


"J.O. Aho" <user@example.net> writes:

> On 11/4/18 1:46 PM, Dan Espen wrote:
>> Paul <nospam@needed.invalid> writes:
>> 
>>> J.O. Aho wrote:
>>>> On 11/3/18 7:34 PM, James Moe wrote:
>>>>> On 11/2/18 12:50 AM, J.O. Aho wrote:
>>>>>
>>>>>> The reason to avoid systemd is that it's a big security vulnerability
>>>>>> risk and it eats up GNU applications.
>>>>>>
>>>>>   Wild accusations without a hint of proof.
>>>>
>>>> The larger code base, the higher risk for vulnerabilities and systemd
>>>> has been having security vulnerabilities quite often compared with the
>>>> other init systems
>>>>
>>>> https://blog.trendmicro.com/trendlabs-security-intelligence/systemd-vulnerability-leads-to-denial-of-service-on-linux/
>>>> https://www.infosecurity-magazine.com/news/linux-systemd-vulnerability-dns
>>>> https://nvd.nist.gov/vuln/detail/CVE-2018-15686
>>>> https://nvd.nist.gov/vuln/detail/CVE-2018-15687
>>>> https://nvd.nist.gov/vuln/detail/CVE-2018-15688
>>>> https://www.theregister.co.uk/2017/07/05/linux_systemd_grants_root_to_invalid_user_accounts/
>>>>
>>>> That just a handful during the last two years, which most people should
>>>> be able to find with a simple search engine query.
>>>>
>>>
>>> I found a neat resource today.
>>>
>>> "systemd"
>>>
>>> https://scan.coverity.com/projects/350
>>>
>>>    484,654 lines of code.
>> 
>> I saw this a while back, so I went to git and downloaded
>> systemd.  It was tiny.
>> 
>> These counts look bogus to me, I think they are including
>> all the services that have been adjusted to work better with systemd.
>> 
> $ git clone https://github.com/systemd/systemd.git
> $ tot=0; for l in `find systemd/src/ -type f -exec wc -l {} \; | sed
> 's/\([0-9]*\) .*/\1/'`; do tot=$(($l + $tot)); done; echo $tot
> 485877
>
> So systemd has grown and there is a bunch of other files that belongs to
> the project which hasn't been counted at all.

That's way more than just systemd.
A quick look shows fsck, hostname, journal, libudev, all kinds of stuff
that have nothing to do with starting  services.

-- 
Dan Espen

Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-01 08:48 -0500
  Re: Anyone know what this nginx error is about? Bit Twister <BitTwister@mouse-potato.com> - 2018-11-01 09:13 -0500
  Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-01 20:21 -0500
    Re: Anyone know what this nginx error is about? Roger Blake <rogblake@iname.invalid> - 2018-11-02 02:14 +0000
      Re: Anyone know what this nginx error is about? Nomen Nescio <nobody@dizum.com> - 2018-11-08 09:49 +0100
    Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-02 08:50 +0100
      Re: Anyone know what this nginx error is about? James Moe <jimoeDESPAM@sohnen-moe.com> - 2018-11-03 11:34 -0700
        Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-04 09:36 +0100
          Re: Anyone know what this nginx error is about? Paul <nospam@needed.invalid> - 2018-11-04 06:17 -0500
            Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-04 13:05 +0100
            [again] software complexity Ivan Shmakov <ivan@siamics.net> - 2018-11-04 12:35 +0000
            Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-04 07:46 -0500
              [again] software complexity Ivan Shmakov <ivan@siamics.net> - 2018-11-04 13:05 +0000
              Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-04 14:27 +0100
                Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-04 11:17 -0500
                Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-04 22:03 +0100
                Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-04 19:03 -0500
              Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-04 18:13 +0000
          Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-04 07:42 -0500
            Re: Anyone know what this nginx error is about? "J.O. Aho" <user@example.net> - 2018-11-04 14:51 +0100
              Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-04 11:04 -0500
              Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-04 18:12 +0000
    Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-02 10:44 +0000
      Re: Anyone know what this nginx error is about? Bobbie Sellers <bliss@mouse-potato.com> - 2018-11-02 06:22 -0700
      Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-02 09:06 -0500
        Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-02 19:41 +0000
          Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-02 15:36 -0500
            Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-02 21:17 +0000
              Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-02 20:36 -0500
                Re: Anyone know what this nginx error is about? Anonymous <anonymous@foto.nl1.torservers.net> - 2018-11-02 21:46 -0400
                Re: Anyone know what this nginx error is about? The Natural Philosopher <tnp@invalid.invalid> - 2018-11-03 09:05 +0000
      Re: Anyone know what this nginx error is about? Andreas Kohlbach <ank@spamfence.net> - 2018-11-02 16:27 -0400
    Re: Anyone know what this nginx error is about? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-11-02 13:05 +0200
      Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-02 08:58 -0500
    Re: Anyone know what this nginx error is about? William Unruh <unruh@invalid.ca> - 2018-11-02 12:59 +0000
      Re: Anyone know what this nginx error is about? Dan Espen <dan1espen@gmail.com> - 2018-11-02 09:21 -0400
      Re: Anyone know what this nginx error is about? Nomen Nescio <noreply@mixnym.net> - 2018-11-02 09:01 -0500
        Re: Anyone know what this nginx error is about? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-11-02 21:35 +0200
      Re: Anyone know what this nginx error is about? Andreas Kohlbach <ank@spamfence.net> - 2018-11-02 16:35 -0400

csiph-web