sshd dependancy to systemd and attack surface

Marc SCHAEFER <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <[email protected]>
Hello,

sshd has a dependancy to systemd, and thus includes a lot of libraries,
which augments its attack surface.

The recent xz-utils issue [1] has lead to this post by someone suggesting
(with a patch, apparently) to confine the sshd -> systemd dependancy
in a subprocess [2].

Maybe you want to look into it?

Thank you.

[1] https://www.openwall.com/lists/oss-security/2024/03/29/4
[2] https://www.openwall.com/lists/oss-security/2024/03/29/23
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.