Bug#784238: systemd: emergency.service restart leads to unusable system

[Michael Biebl]

Am 04.05.2015 um 15:56 schrieb Bernd Zeimetz:

> Please learn that single user mode is perfectly fine for doing all weird
> things tou could imagine, including installing or removing things
> because one doesn't want to boot a full system.

single user mode != emergency mode

 Please stop trying to
> force your ideas of how people should work by messing with their init
> systems.

You give me too much credit. It's not my idea how modern (linux)
computer systems work nowadays. You should be willing to adapt your
(best) practices if you want to keep up-to-date.


>>> Actually one should discuss if a CVE number should be assigned here.
>>
>> No, not really. What we probably should do is mark
>> emergency.service as
>> RefuseManualStart=yes
>> RefuseManualStop=yes
>> because restarting it is stupid and needrestart shouldn't do it.
>> It's like killing getty while you're logged in.
> 
> Then fix it.
> The way it behaves currently is a security issue.

You keep repeating that. Please show a way to exploit that "security issue".


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20150504/d8d13640/attachment-0002.sig>