Исходное сообщение
"Разбор логики активации и работы бэкдора в пакете xz" Отправлено 1, 31-Мрт-24 14:26
тут Лёня Поттеринг высказался в ответ на критику своего любимого детища: Uh. systemd documents the protocol at various places and the protocol is trivial: a single text datagram sent to am AF_UNIX socket whose path you get via the NOTIFY_SOCKET. That's trivial to implement for any one with some basic unix programming knowledge. And i tell pretty much anyone who wants to listen that they should just implement the proto on their own if thats rhe only reason for a libsystemd dep otherwise. In particular non-C environments really should do their own native impl and not botjer wrapping libsystemd just for this. But let me stress two other things: Libselinux pulls in liblzma too and gets linked into tons more programs than libsystemd. And will end up in sshd too (at the very least via libpam/pam_selinux). And most of the really big distros tend do support selinux at least to some level. Hence systemd or not, sshd remains vulnerable by this specific attack. https://news.ycombinator.com/item?id=39867126 libselinux тоже прекрасный вектор для этой атаки -- тоже связан с liblzma