Bug#766050: systemd: Please look at a read-only implementation of debug-shell.service

[Richard Hartmann]

Package: systemd
Version: 215-5+b1
Severity: wishlist

Dear all,

similar to zack's #766039, I would like to ask if it's possible to
always enable a read-only version of debug-shell.service.

The reasoning should be obvious: Always provide potentially useful
feedback to all local users, while preventing said users from entering
commands etc.

I am not sure if this could leak security-relevant information or not.


This probably needs to be bumped upstream, but I would much rather do
this if I knew Debian's maintainers are behind this idea.


Thanks,
Richard


-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages systemd depends on:
ii  acl             2.2.52-2
ii  adduser         3.113+nmu3
ii  initscripts     2.88dsf-53.4
ii  libacl1         2.2.52-2
ii  libaudit1       1:2.4-1
ii  libblkid1       2.25.1-5
ii  libc6           2.19-11
ii  libcap2         1:2.24-6
ii  libcap2-bin     1:2.24-6
ii  libcryptsetup4  2:1.6.6-2
ii  libgcrypt20     1.6.2-4
ii  libkmod2        18-3
ii  liblzma5        5.1.1alpha+20120614-2
ii  libpam0g        1.1.8-3.1
ii  libselinux1     2.3-2
ii  libsystemd0     215-5+b1
ii  sysv-rc         2.88dsf-53.4
ii  udev            215-5+b1
ii  util-linux      2.25.1-5

Versions of packages systemd recommends:
ii  dbus            1.8.8-2
ii  libpam-systemd  215-5+b1

Versions of packages systemd suggests:
pn  systemd-ui  <none>

-- no debconf information