Inferencium/website
1
0
Fork 0
Code Issues Activity

Improve readability

Browse Source
This commit is contained in:
inference 2023-10-31 02:57:38 +00:00
parent ca0379fde5
commit ede5e92a5c
Signed by: inference
SSH Key Fingerprint: SHA256:FtEVfx1CmTKMy40VwZvF4k+3TC+QhCWy+EmPRg50Nnc
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
blog/systemd_insecurity.html
View File

@ -5,7 +5,7 @@
<!-- Copyright 2022 Jake Winters --> <!-- Copyright 2022 Jake Winters -->
<!-- SPDX-License-Identifier: BSD-3-Clause --> <!-- SPDX-License-Identifier: BSD-3-Clause -->
<!-- Version: 5.0.1-alpha.6 --> <!-- Version: 5.0.1-alpha.7 -->
<html> <html>
@ -48,7 +48,7 @@
<blockquote>"You don't assign CVEs to every single random bugfix we do, do <blockquote>"You don't assign CVEs to every single random bugfix we do, do
you?"</blockquote> you?"</blockquote>
<p>- Lennart Poettering, systemd lead developer</p> <p>- Lennart Poettering, systemd lead developer</p>
<p>My thoughts: Yes, if they're security-related.</p> <p><b>My thoughts:</b> Yes, if they're security-related.</p>
<p>Source: <p>Source:
<a href="https://github.com/systemd/systemd/pull/5998#issuecomment-303782334">systemd GitHub Issue 5998</a></p> <a href="https://github.com/systemd/systemd/pull/5998#issuecomment-303782334">systemd GitHub Issue 5998</a></p>
</section> </section>
@ -60,7 +60,7 @@
blesses the nonsensical part of the CVE circus which we really shouldn't blesses the nonsensical part of the CVE circus which we really shouldn't
bless..."</blockquote> bless..."</blockquote>
<p>- Lennart Poettering, systemd lead developer</p> <p>- Lennart Poettering, systemd lead developer</p>
<p>My thoughts: CVEs are supposed to be for security, and a log of when they <p><b>My thoughts:</b> CVEs are supposed to be for security, and a log of when they
were found and their severity, so yes, it <em>is</em> the correct way to were found and their severity, so yes, it <em>is</em> the correct way to
announce it. It seems as if over 95 security-concious people think the same.</p> announce it. It seems as if over 95 security-concious people think the same.</p>
<p>Source: <p>Source:
@ -89,7 +89,7 @@
So, yeah, I don't think there's anything to fix in systemd here. I understand So, yeah, I don't think there's anything to fix in systemd here. I understand
this is annoying, but still: the username is clearly not valid."</blockquote> this is annoying, but still: the username is clearly not valid."</blockquote>
<p>- Lennart Poettering, systemd lead developer</p> <p>- Lennart Poettering, systemd lead developer</p>
<p>My thoughts: systemd was the thing that allowed root access just because a <p><b>My thoughts:</b> systemd was the thing that allowed root access just because a
username started with a number, then Poettering blamed the user.</p> username started with a number, then Poettering blamed the user.</p>
<p>Source: <p>Source:
<a href="https://github.com/systemd/systemd/issues/6237#issuecomment-311900864">systemd GitHub Issue 6237</a></p> <a href="https://github.com/systemd/systemd/issues/6237#issuecomment-311900864">systemd GitHub Issue 6237</a></p>