The NSA Is Looking At Systemd's KDBUS

[phoronix]

Phoronix: The NSA Is Looking At Systemd's KDBUS

The latest "news tip" is from a Phoronix reader who expressed "concerns" that at least one NSA security analyst is going through the code for KDBUS, the systemd-backed in-kernel IPC mechanism that's planning for integration in Linux 4.3...

http://www.phoronix.com/scan.php?pag...US-Credentials

[wargames]

It's pretty obvious that the linux kernel is full of backdoors. There are so many people working on it, that it is almost impossible to detected all backdoors.

[oleid]

It's pretty obvious that the linux kernel is free of backdoors. There are so many people working on it, that it is almost impossible to hide any backdoors.

[Awesomeness]

Systemd's KDBUS?
kdbus is not a systemd project.

[duby229]

Systemd's KDBUS?
kdbus is not a systemd project.

That is what you can say, but the reality is that systemd devs are the ones developing it and pushing.

[staggerlee]

It's bad enough they get to x-ray , fondle, steal from, harass, boss us around, listen to all of our phone calls, read all of our emails and humiliate us. We already know Micro$$oft is in with them but keep your hands off of linux for gods sake. Where is your line in the sand. Mine is been at least 7 years ago. I love how when you don't believe known liars ( the government) you get ridiculed as a tin foil hat conspiracy theorist... http://www.consumeraffairs.com/news/...ow-030615.html

[stqn]

Uh… I got a mail telling me there was a new post in this thread, but I never subscribed to it! I haven’t read the article yet…
And yet it says "subscribed" at the top of this page.

[uid313]

I am more worried about the guys behind systemd than NSA.
The systemd developers will push any crap to the kernel, and now introduce security vulnerabilities to maintain legacy backwards compatibility with old smelyl dbus1 code.

They should have just used a simple virtual file-based IPC as is the Unix philosophy, instead of a special socket type.
Seems the guys from Plan 9 from Bell Labs who designed the IPC system Plumber got it right.
Then you could enforce security on a file-based level via chmod, chgrp, chown, AppArmor and SELinux.

[Cape]

Uh… I got a mail telling me there was a new post in this thread, but I never subscribed to it! I haven’t read the article yet…
And yet it says "subscribed" at the top of this page.

Must be the NSA screwing with the server.

[TheBlackCat]

The systemd developers will push any crap to the kernel, and now introduce security vulnerabilities to maintain legacy backwards compatibility with old smelyl dbus1 code.

Try reading the article next time, it isn't a security vulnerability.

They should have just used a simple virtual file-based IPC as is the Unix philosophy, instead of a special socket type.
Seems the guys from Plan 9 from Bell Labs who designed the IPC system Plumber got it right.
Then you could enforce security on a file-based level via chmod, chgrp, chown, AppArmor and SELinux.

Again, kdbus does use a virtual file-based IPC. I have pointed this out to you at least three other times, but you keep ignoring it.