Reasons to stay with Devuan

Altoid · 2021-06-11 07:13:49

Hello:

In a blog post on Thursday, GitHub security researcher Kevin Backhouse recounted how he found the bug (CVE-2021-3560) in a service called polkit that is used in systemd, a common Linux system and service manager component.

Backhouse says the flaw is surprisingly easy to exploit, requiring only a few commands using standard terminal tools like bash, kill, and dbus-send.

See:
Seven-year-old make-me-root bug in Linux kernel patched. https://www.theregister.com/2021/06/11/ … olkit_bug/

So ...
Still want to know if there's a reason to stay with Devuan?

Best,

A.

Last edited by Altoid (2021-06-11 07:15:49)

GlennW · 2021-06-11 07:44:07

Thank you Altoid!

zapper · 2021-06-11 09:41:51

I am not one bit surprised, the harder the software is to audit, the more this bs happens. Heh...

Also, system dumb is a huge piece of software, its almost as big as the linux kernel I hear...

That is just wild...

and redhat thinks we should trust their bs? wtf...

no way... man.

dice · 2021-06-11 11:57:10

This is one of the reasons i stay with devuan, having no reliance on systemd i can disable dbus which stops crap like this happening. Disabling dbus is not for everyone but ive made it work on my machines.

Head_on_a_Stick · 2021-06-11 13:51:13

This vulnerability is assigned to the policykit-1 package, which is present and used in the current Devuan stable release:

https://security-tracker.debian.org/tra … -2021-3560

It has nothing to do with systemd.

dice · 2021-06-11 14:21:04

Head_on_a_Stick wrote:

This vulnerability is assigned to the policykit-1 package, which is present and used in the current Devuan stable release:
https://security-tracker.debian.org/tra … -2021-3560
It has nothing to do with systemd.

I think we know this, but as systemd and debian rely heavily on polkit and dbus, this puts devuan in a unique situation.

Head_on_a_Stick · 2021-06-11 14:22:10

Devuan's default graphical desktop relies pretty heavily on polkit and dbus.

dice · 2021-06-11 14:24:06

Head_on_a_Stick wrote:

Devuan's default graphical desktop relies pretty heavily on polkit and dbus.

exactly but you cant have debian without systemd or dbus, you can but as default its not possible.

Head_on_a_Stick · 2021-06-11 14:28:22

Better link for the story: https://github.blog/2021-06-10-privileg … -with-bug/

fsmithred · 2021-06-11 14:31:37

What do "fixed" and "not affected" mean? I expect "not affected" to mean "doesn't need to be fixed" rather than "we fixed it".

Head_on_a_Stick · 2021-06-11 14:36:51

The bug was introduced after the beowulf version was frozen so it was never affected. The version in ceres was fixed by an upstream update.

dice · 2021-06-11 14:47:01

Head_on_a_Stick wrote:

The bug was introduced after the beowulf version was frozen so it was never affected. The version in ceres was fixed by an upstream update.

Not a bug, a huge gaping hole.

ComputerBob · 2021-06-12 01:03:20

Even if I weren't convinced of Devuan's technical superiority to the very similar, but now-systemd-dependent distro that I used for years,

I still remember the first time I installed an booted up Devuan Ascii, several years ago. I was almost immediately struck by:

Devuan's ease of setup, configuration, and use
How much Devuan reminded me of a much-older, easier (for me to configure) version of my previously used distro, BEFORE IT ADDED SYSTEMD.

During the years that I've been here, I've also been VERY impressed with Devuan's knowlegable, helpful, patient (not sarcastic) community, as demonstrated in this 110-post thread in which MY OWN STUPIDITY caused me to open and then keep the thread going to successful completion, AND this 2-post thread, in which I thanked everyone for their patient help, and apologized for having been so stupid.

I've used Linux full-time since 1996 (CORRECTION: IT WAS 2006), but I've personally never experienced that incredible combination of knowledge, skill, patience, and true helpfulness that I've seen AND EXPERIENCED here.

To me, not only is Devuan the best software, but, also, its community is as good as its software, and that's really important to me.

Last edited by ComputerBob (2021-06-18 14:02:04)

NicePics13 · 2021-06-19 08:18:08

Devuan, Slackware and OpenBSD are my holy trinity for expected behaviour, reliability and comfort

zapper · 2021-06-19 12:58:33

NicePics13 wrote:

Devuan, Slackware and OpenBSD are my holy trinity for expected behaviour, reliability and comfort

For me, its Hyperbola and Devuan.

And as long as you don't use the testing branch of Hyperbola, it seems to be stable,

Though I like 0.4 at the moment even if it does have some quirks here and there...

But its being worked on so,

Devuan is what I use for my gaming habits though.

The officially official Devuan Forum!

#1 2021-06-11 07:13:49

Reasons to stay with Devuan

#2 2021-06-11 07:44:07

Re: Reasons to stay with Devuan

#3 2021-06-11 09:41:51

Re: Reasons to stay with Devuan

#4 2021-06-11 11:57:10

Re: Reasons to stay with Devuan

#5 2021-06-11 13:51:13

Re: Reasons to stay with Devuan

#6 2021-06-11 14:21:04

Re: Reasons to stay with Devuan

#7 2021-06-11 14:22:10

Re: Reasons to stay with Devuan

#8 2021-06-11 14:24:06

Re: Reasons to stay with Devuan

#9 2021-06-11 14:28:22

Re: Reasons to stay with Devuan

#10 2021-06-11 14:31:37

Re: Reasons to stay with Devuan

#11 2021-06-11 14:36:51

Re: Reasons to stay with Devuan

#12 2021-06-11 14:47:01

Re: Reasons to stay with Devuan

#13 2021-06-12 01:03:20

Re: Reasons to stay with Devuan

#14 2021-06-19 08:18:08

Re: Reasons to stay with Devuan

#15 2021-06-19 12:58:33

Re: Reasons to stay with Devuan

Board footer