[artix-general] elongind and X
Christos Nouskas
nous at artixlinux.org
Wed Nov 22 22:15:24 EET 2017
On 22 November 2017 at 21:05, Ruben Safir <ruben at mrbrklyn.com> wrote:
> My laptop is one thing by my mail server and ssh and apache server is
> another. It is just a big rich attack vector and on my workstation it
> is a huge complex hairball of dependencies where I've lost control of my
> hardware.
Not defending systemd/elogind crap, but you could just disable the
elogind and/or polkit daemons on your servers. Problem solved.
On a relevant note, I just tested and found out that any logged-on
user (even remotely connected via ssh and regardless of group
membership) can issue loginctl power-related commands in a true
fuck-me-plenty-with-a-chainsaw fashion. It's not a bug, it's a
feature.
More information about the artix-general
mailing list