SUDO Will be Protest Software

I still use su. I find the obsession with sudo in the debian based distro's a little weird.

We su’d up and down the hill both ways!

yeah ik, i posted a comment saying he works for microsoft now but because red hat directly contributes to and funds systemd its still a project they oversee to some extent but it is really funny to think of microsoft backdooring linux by pushing run0

@@RealWaffles missed that comment :) yes, it’s really bizarre. And rather remarkable watching the Linux community shift from hating MS, to gorging themselves with MS software and loving it. At any rate, I’m more content over here in the BSD and Illumos family. But I still do run some Linux stuff

Yep. SystemD was a mistake.

@@edwardcullen1739 Wouldn't say that. It definitely does some things right. But it does a bit to much I feel like.

Smaller attack surface. 😇 Single point of failure. 😱

@@Lestibournes Yea it is kind of a balance act, thats hard to get right. You can argue, oh, it should only manage processes/services, thats what an init system is supposed to do. But naturally, things a very interconnected, processes also naturally need logging, networking, encryption related things and so on. So, you have two options: you leave the init system very small and make it only do one thing: init the system. Thats good, as in you have small codebase/attack surface and separation or concerns. On the other hand, you things tend to be more "ductaped together", and interoperability between components become harder, and less consistent. You don't have uniformity. Its a battle u can't win, no matter how you do it.

@@kyu9649 Yes, it seduces with comprehensiveness, yet it introduces as many problems as it solves. Text logging that you can view with simple, existing, well-tested programs, replaced with special-purpose tools, that require developing new skills (and bugs) that were previously unnecessary, for what? What benefit do binary logs provide? When anyone serious is exporting them to an external system _anyway._ This is just one example of the many wrong-headed decisions that permeates the SystemD ecosystem. The Linux/Unix way is different from the Windows or Mac way. I'm not one of these puritanical fuddy-duddies that says "everything is fine the way it was", because that's clearly wrong... But the way SystemD has gone about it is absolutely the wrong direction - Linux/Unix is attractive because it's _not_ Windows, _not_ Mac, so aping those systems is just not the way forward. Learn from them and re-interpret what they do in the Unix way, if their solutions are useful, this is what we should do.

THE RIDE NEVER ENDS

doas is default in openbsd. if you use openbsd its still there as normal

still usable on gentoo, too. that's what i use. doas removes a lot of the attack surface of sudo but poettering really doesn't like the SUID binary existing at all

SystemD coming to windows 11 soon???

i ended up using doas on gentoo and it's been good. i forget what other distro i used recently that had doas. but i noticed it wouldn't ask for password in that terminal session so i guess its just in how its configured

@@RealWaffles Doas works just fine for my needs.

some distros like gentoo support it too, its very nice

Only OpenBSD does. The others have the same OpenDoas fork that Linux has

i have good news, its even worse than i thought it would be. the skinny is since its a wrapper for systemd-run, it ships information between a user PTY and a root command, and runs every root command as a service that is kinda exploitable because you are now susceptible to root hijacking via that PTY. services are also on the system slice and can be easily read. this means you can query dbus and get sensitive information like API keys. a tool like reptyr which was used as an exploit tool on unix systems in the 90s can be used on systemd-run. and that's just 1 example. so kinda like i thought, it tries to fix 1 problem which was mostly fixed by doas and more issues in the process that were solved 20 years ago