F40 Change Proposal: Systemd Security Hardening (System-Wide)

2023-11-20 Thread Aoife Moloney
Steering Committee. == Summary == Improve security by enabling some of the high level systemd security hardening settings that isolate and sandbox default system services. == Owner == * Name: [[User:Sundaram| Rahul Sundaram]] * Email: methe...@gmail.com == Detailed Description == systemd provides a

Re: Systemd Security

2016-10-06 Thread Ivan Chavero
- Original Message - > From: "Tomasz Torcz" > To: devel@lists.fedoraproject.org > Sent: Thursday, October 6, 2016 3:11:36 PM > Subject: Re: Systemd Security > > On Thu, Oct 06, 2016 at 04:05:34PM -0400, Ivan Chavero wrote: > > > On Thu, Oct 06, 2

Re: Systemd Security

2016-10-06 Thread Ivan Chavero
- Original Message - > From: "Lennart Poettering" > To: "Development discussions related to Fedora" > > Sent: Thursday, October 6, 2016 11:58:06 AM > Subject: Re: Systemd Security > > On Thu, 06.10.16 12:33, Ivan Chavero (ichav...@redhat.com)

Re: Systemd Security

2016-10-06 Thread Chris Adams
Once upon a time, Ivan Chavero said: > I'm not hijacking any thread, I STARTED this thread No, you didn't start a thread. You posted a reply to an unrelated message (the subject of that message was "Re: Fedora 25 Beta 1.1 compose check report"). When you want to start a new thread, do not reply

Re: Systemd Security

2016-10-06 Thread Adam Williamson
On Thu, 2016-10-06 at 16:05 -0400, Ivan Chavero wrote: > I'm not hijacking any thread, I STARTED this thread (BTW, just searched for > emails > with the "Systemd Security" subject in this mailing list and didn't find any > immediate matches) because i have an hon

Re: Systemd Security

2016-10-06 Thread Tomasz Torcz
On Thu, Oct 06, 2016 at 04:05:34PM -0400, Ivan Chavero wrote: > > On Thu, Oct 06, 2016 at 12:33:30PM -0400, Ivan Chavero wrote: > > > > > > I found this article stating some alarming claims about systemd > > > security, are this claims true? > > > >

Re: Systemd Security

2016-10-06 Thread Ivan Chavero
- Original Message - > From: "Tomasz Torcz" > To: devel@lists.fedoraproject.org > Sent: Thursday, October 6, 2016 11:53:23 AM > Subject: Re: Systemd Security > > On Thu, Oct 06, 2016 at 12:33:30PM -0400, Ivan Chavero wrote: > > > > I found t

Re: Systemd Security

2016-10-06 Thread Lennart Poettering
On Thu, 06.10.16 12:33, Ivan Chavero (ichav...@redhat.com) wrote: > Setting a umask of 0 means that, by default, any file created by systemd > will be world-readable and -writable. Systemd defines a macro called > RUN_WITH_UMASK > which is used to temporarily set a more restrictive umask when s

Re: Systemd Security

2016-10-06 Thread Tomasz Torcz
On Thu, Oct 06, 2016 at 12:33:30PM -0400, Ivan Chavero wrote: > > I found this article stating some alarming claims about systemd > security, are this claims true? > First of all, do not hijack threads. If you want to start something new, start it, and do not reply to unre

Systemd Security

2016-10-06 Thread Ivan Chavero
I found this article stating some alarming claims about systemd security, are this claims true? If so, as developers should we be hardening systemd? It states stuff like this: " Systemd's "we don't make mistakes" attitude towards security can be seen in other place