Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×

Submission + - Systemd wants to expand to include a sudo replacement (fosspost.org)

Submitted by Anonymous Coward
An anonymous reader writes: Systemd lead developer Lennart Poettering has posted on Mastodon about their upcoming v256 release of Systemd, which is expected to include a sudo replacement called “run0”.

The developer talks about the weaknesses of sudo, and how it has a large possible attack surface. For example, sudo supports network access, LDAP configurations, other types of plugins, and much more. But most importantly, its SUID binary provides a large attack service according to Lennart:

"I personally think that the biggest problem with sudo is the fact it’s a SUID binary though – the big attack surface, the plugins, network access and so on that come after it it just make the key problem worse, but are not in themselves the main issue with sudo. SUID processes are weird concepts: they are invoked by unprivileged code and inherit the execution context intended for and controlled by unprivileged code. By execution context I mean the myriad of properties that a process has on Linux these days, from environment variables, process scheduling properties, cgroup assignments, security contexts, file descriptors passed, and so on and so on."

He’s saying that sudo is a Unix concept from many decades ago, and a better privilege escalation system should be in place for 2024 security standards:

  "So, in my ideal world, we’d have an OS entirely without SUID. Let’s throw out the concept of SUID on the dump of UNIX’ bad ideas. An execution context for privileged code that is half under the control of unprivileged code and that needs careful manual clean-up is just not how security engineering should be done in 2024 anymore."

Submission + - NASA discovered a planet with a gas that is 'only produced (unilad.com) 1

Submitted by Baron_Yam
Baron_Yam writes: NASA explains: "The abundance of methane and carbon dioxide, and shortage of ammonia, support the hypothesis that there may be a water ocean underneath a hydrogen-rich atmosphere in K2-18 b.

"These initial Webb observations also provided a possible detection of a molecule called dimethyl sulfide (DMS). On Earth, this is only produced by life. The bulk of the DMS in Earth’s atmosphere is emitted from phytoplankton in marine environments."

Comment Re:Working on Sopwith, AMA (Score 2) 42

by UnknownSoldier (#64421370) Attached to: Veteran PC Game 'Sopwith' Celebrates 40th Anniversary

Questions that readers might want to know about:

1. What has been the hardest part of the codebase / toolchain to update? Anything specific to Linux/BSD?
2. Are there any APIs / features that you wish were in Linux/BSD that would make working on Sopwith easier?
3. What has been the most enjoyable part of the code to work on?
4. Are there any upcoming features that you can talk about that you are most excited about?
5. What do you think part of the "charm" of Sopwith is? Nostalgia? Simplicity? Something else?
6. Is there an HD Texture Pack, Widescreen option, mod, or other high resolution graphic's options for modern screens given that Sopwith was designed for CGA's 320x200 screen. (Similar to how Diablo II v1.13+ had a Widescreen mod.)
7. Any plans for a better HUD. i.e. Show airspeed, etc.
8. Any plans for mod support?
9. With the enshittification of AAA games via over priced MTX what are your thoughts on retro gaming and the future of gaming?

Comment Re:Oh, come on ... (Score 1) 165

by UnknownSoldier (#64421098) Attached to: No One Buys Books Any More

Hmm, somehow I've missed Vernor Vinge. Thanks for the heads up.

I totally forgot about The Expanse. Loved Netflix's adaption so I'm REALLY looking forward to reading this.

I read the entire Dune books in high school and found them to be extremely boring -- long, dry winded.

I typically pass on Cyberpunk as I'm not generally a fan of dystopian worlds -- I read SF to be inspired not depressed! However, maybe it is time to give Neal Stephenson and William Gibson a chance ...

For the rest of the authors, yup, looks like I have some new reading material. Thanks for the list of authors! A lot of these names I recognize just have never gotten around to them for some reason.

BattleTech and Warhammer have never really caught my eye -- aside from the odd game here and there (BattleTech: The Crescent Hawk's Inception, MW4). While I can admire Mechs from a fun "blow shit up" POV I find the technology of giant mechs to be utterly stupid. With technology things generally get much, much, smaller. A giant mech is like someone doesn't understand future tech and how it works. I have seen Warhammer pop up from time to time so maybe I'll consider checking out Horus Heresy, Night Lords: Omnibus, etc.

Thanks again for the suggestions.

Comment Re:I love books (Score 1) 165

by UnknownSoldier (#64419386) Attached to: No One Buys Books Any More

Yeah, I don't know where the *good* Sci-Fi authors went either?

* Does anyone know if Lindsay Ellis' Axiom's End is any good?
* I'm extremely disappointed in Andy Weir's Project Hail Mary. I'm about 2/3 of the way through and it is SO boring.
* I was given Ready Player One as a gift and I'm NOT looking forward to reading given how shit the movie is/was. Are the books any good?
* Apparently the original Chinese book is better then Netflix's adaption of the 3 Body Problem but the series highlights the idiotic nature of the source material so I'm not interested in reading that either.
* Apple TV's adaption of Foundation was decent (even with the changes) but it just reminds me that I miss Asimov, Clarke, and Heinlein even more.

SF/Fantasy seems to be the way things are going. :-/

* Netflix's adaptation of Lev Grossman's The Magicians was good.

What I want is a site is where I rate a book I've read 0 to 5 stars and it will recommend similar books that I will like. I haven't checked goodreads but maybe I should?

Comment Set file systems BACK 50 years (Score 3, Interesting) 80

by UnknownSoldier (#64414530) Attached to: How CP/M Launched the Next 50 Years of Operating Systems

CP/M is proof that shitty file system design (stupid 8.3 filenames) can have far lasting changes. Even today in Windows 11 we can't name a filename with a colon (:) due to the dumb decision of using colon to designate a drive instead of Unix's consistent and beautiful nomenclature to refer to devices with slashes.

My Apple 2 had 30 character filenames (WITH spaces) and using CP/M + Microsoft's Z80 SoftCard + Wordstar felt like a downgrade.

I still love Apple poking fun of MS blindly copying dumb features:

C:\ONGRTLNS.W95

At least MS was smart enough to use a recycle bin instead of a trash can.

Comment Re:Is there ANY precedent for this? (Score 1) 85

Thanks for the update!

I didn't think Circuit City would last when they did their artificially limited play time with their proprietary DIVX set-top players. Looks like CC shutdown in 2009 and got sold/rebranded as TigerDirect.

I see there is a documentary called "A Tale of Two Cities: The Circuit City Story" where the website pokes fun of Collin's "From Good To Great" label by saying it is a tale of two cities:
* from good to great
* from great to gone

Ouch!

> if I threw darts at a wall with a list of companies, I probably could have done just as well in making picks.

I've heard that criticism before. Thanks for confirming that it isn't just a "one-off" opinion.

> So I guess it is a win-win for Collins, either way he gets to write more books?

Yup,
* if the companies stay in business he gets to write another book "See, I was right!", or
* if the companies go out of business he gets to write another book "See, I was right!"

Pretty sweet gig being a pundit. You get to write more books regardless of the success/failure. /s

> most business leaders are idiots and are terrible at managing their businesses.

Kind of shocking just how many businesses fail in the first X years:

* ~20% fail within the 1st year
* ~30% fail within the 2nd year
* ~40% fail within the 3rd year
* ~50% fail within the 5th year
* ~66% fail by their 10th year
* ~80% fail by their 20th year

Any other good business management books that are worth reading?

Slashdot Top Deals

I program, therefore I am.

Close