Article 2W9NX [$] User=0day considered harmful in systemd

[$] User=0day considered harmful in systemd

by
jake
from LWN.net on (#2W9NX)
<p>Validating user input is a long-established security best practice, butthere can be differences of opinion about what should be done when thatvalidation fails. A recently reported bug in systemd has fostered adiscussion on that topic; along the way there has also been discussionabout how much validation systemd should actually be doing and how much should be left upto the underlying distribution. The controversy all revolves aroundusernames that systemd does not accept, but that some distributions (andPOSIX) find to be perfectly acceptable.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments