Re: systemd latest upgrade

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 01-02-17 10:12, Jelle van der Waa wrote:
On 01/31/17 at 04:18pm, Jude DaShiell wrote:
However any package install now finishes with the
message:
Arming ConditionNeedsUpdate ....

That's just a pacman hook to touch /var, for the recent CVE issue in
systemd  [1] [2]

[1] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/systemd&id=59541b72a7ec32b30343a2a388b40ea1365f6308
[2] http://www.openwall.com/lists/oss-security/2017/01/24/4


The new hook checks for changes in and touches /usr, not /var or /run .

A search for systemd ConditionNeedsUpdate gives [*] .

that condition appears to be used for determining whether a change in /usr requires changes in /etc or /var.

There are some archlinux systemd services that use ConditionNeedsUpdate=/etc , but i can find none that use it with /var .

looks to me like this hook either fails defending fromn that CVE or has some other purpose.

LW





[*] https://www.freedesktop.org/software/systemd/man/systemd.unit.html#ConditionNeedsUpdate=



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux