Ariadne Conill 🐰 on Nostr: as I explain in my blog, the real problem is libraries which are large amalgamations ...
as I explain in my blog, the real problem is libraries which are large amalgamations of unrelated routines, such as libsystemd in the case of CVE-2024-3094.
a good solution is to split up these giant libraries into smaller ones, thus allowing for the dependency graphs of programs to remain leaner.
there is nothing about sd_notify() which requires LZMA compression. nothing. it is a function which writes a supplied string to a UNIX socket, the path of which is provided on an environmental variable.
a good solution is to split up these giant libraries into smaller ones, thus allowing for the dependency graphs of programs to remain leaner.
there is nothing about sd_notify() which requires LZMA compression. nothing. it is a function which writes a supplied string to a UNIX socket, the path of which is provided on an environmental variable.