Linux isn't magic, it's sudo science. 🐧🐧🐧 - ThreadSky

cyberciti.biz • 38 days ago

Linux isn't magic, it's sudo science. 🐧🐧🐧

Comments

mephistolist.bsky.social•38 days ago

doas > sudo

ldo17.bsky.social•37 days ago

systemd-run0 >> doas ∪ sudo

mephistolist.bsky.social•37 days ago

If I have to be on something with systemd, you are correct. I would steer clear of systemd for security if I can though. Which means doas would be the best I could get.

ldo17.bsky.social•37 days ago

systemd-run0 is supposed to be much more secure and easier to maintain than either of those steaming piles of overcomplicated set-user-ID code.

Poettering has a plan to get rid of set-user-ID altogether.

mephistolist.bsky.social•37 days ago

It sounded that way from what I just read. I just don't recommend systemd. I know that's a hot debate, but larger code bases seem to always lead to larger attack vectors. I'd rather be using doas on HardenedBSD, but I'm often forced onto Linux with systemd. I will learn this. Thanks!

ldo17.bsky.social•37 days ago

The idea here is to *reduce* the attack vector.

Systemd Myth #1: systemd is monolithic.

http://0pointer.de/blog/projects/the-biggest-myths.html

123blueboy321.bsky.social•37 days ago

Sure am glad a few Linux distributions never drank the systemd koolaide.

Slackware is still a clean pure Linux.

mephistolist.bsky.social•37 days ago

Slackware is dope. I used to use it exclusively, but now if I need something more advanced than Debian I jump to BSD. It still respect Slackware and Arch. Debian and BSD are my go-to distros now though.

ldo17.bsky.social•37 days ago

Slackware uses PulseAudio now. Remember Poettering created that before going on to systemd?