• 0 Posts
  • 5 Comments
Joined 2 years ago
cake
Cake day: June 27th, 2024

help-circle
  • Have you ever tried to use Upstart? It was afwul, in practice it was worse than sysvinit+lsb, in a time one woukd thought any new init system can be better.

    There was no way to properly define any complex servixe dependencies, especially with optional or alternative components. And making mistake in defining service forking behaviour would open lock the system down so it could not be cleanly shut down. Those were serious flaws in both design an implementation.

    I made a mistake trying to use it in a Linux distribution I was co-developing. So much time an effort lost, when we could directly switch to systemd. But systemd was described as ‘work in progress’ an Upstart ‘practically production ready’ then.




  • Yes, Xorg being suid is stupid. That used to be needed due to several historical reasons, but is not any more.

    But for ‘su’ or ‘sudo’ suid is still the right mechanism to use. Capabilities won’t help, when the tool is supposed to give one full privileges. Of course, in some use cases no such command is needed, then the system can run with no suid. Similar functionality could be implemented without suid too (e.g. ssh to localhost), but with its own security implications, usually bigger than those brought but a mechanism as simple as suid (the KISS rule).