[systemd-devel] [PATCH] TODO: add molly-guard functionality

Lennart Poettering lennart at poettering.net
Mon Aug 25 18:14:42 PDT 2014


On Mon, 25.08.14 11:21, Josh Triplett (josh at joshtriplett.org) wrote:

> 
> On Mon, Aug 25, 2014 at 07:19:47PM +0200, Lennart Poettering wrote:
> > On Sat, 23.08.14 19:26, Josh Triplett (josh at joshtriplett.org) wrote:
> > 
> > > Rather than requiring a third-party tool for this, systemctl should
> > > handle this natively.
> > 
> > This has been proposed before, but I sounds awfully random to me to have
> > in systemd. I am pretty sure this should be an add-on, but not
> > something we should support out-of-the-box.
> 
> I wouldn't argue that it's something we should *enable* by default, just
> something to have available and enableable (perhaps via system.conf).
> 
> Related to that, would you be willing to take patches for separate tiny
> binaries for shutdown/poweroff/etc, so that they don't depend on argv[0]
> to decide what to do?  That would make it easier to do things like
> diverting /sbin/poweroff to /sbin/poweroff.real and putting a wrapper in
> /sbin/poweroff.

We support those binaries only for compat with Sysv, and already there
they were the same binary. We generally do not extend the feature set of
compatibility features compared to the version we try to be compatible to.

Note that you can actually name the binaries any way you like, as long
as the binaries are still contain the "poweroff" sub string, which is
what we check for. Hence, calling the binary /usr/bin/poweroff.real is
already totally OK.

Lennart

-- 
Lennart Poettering, Red Hat


More information about the systemd-devel mailing list