SystemD Root Access Exploit Found, Devuan Team Calls SystemD "Unicorn Sh*t" "Yet another high severity systemd bug in Ubuntu. Let us wish all Devuan users a wonderful day out with their family, instead of shoveling unicorn sh*t."

Systemd isn't the enemy because it's new: it's anti-Unix because it kills composability. Small tools → easy for one hacker to fix/fork/replace. Million-loc monoliths → corporate control, anti-FOSS in practice. Modern Linux stacks centralize power. That's the real issue. #UnixPhilosophy #FOSS #RUNBSD

It's time to give Devuan some serious consideration

I think a test drive of devuan is in order

Beautiful time to download Artix and give a big middle finger to SystemD.

It's funny how every security issue and bug the systemd guys claimed would be impossible if systemd were adopted has come to pass. There exists equal or superior options to systemd. Systemd's monolithic nature makes it completely undesirable in its own right.

Would be so funny if everybody jumped ship. That's the only way the retards will understand that if you don't make your users happy, they jump ship. I'm happy to be on Slackware. Well, we use Fedora at work, but that can be fixed easily.

Here's the in-depth simple to understand article on it: But I think its kinda...old I mean that one? Previously?

I have nothing against SysV init and autofs except for the endless experience of race conditions, sleep/retry/reboot event model, and lack of privilege isolation/cgroup containment. systemd just happens to be the one project I've found that cares about such things. But snap ...😜

Is this about this snapd vulnerability ? (if yes, it's not directly a SystemD vulnerability)

Having actually liked through their repo a few times. Unicorn shit is fairly appropriate. Code looks like what I've seen out of new college graduates... Not a lot of discipline.

Devuan has an active account on X, give them a follow: @DevuanOrg ✌️😀

What distros are safe now? Any of the simpler linux like Zorrin or Mint still viable?

For the record, the douchebag pronounces his name "Leonard Pettering". The "O" in his last name is silent. It's important for history to understand how certain spellings and pronunciations of names lead to sociopathy.

Still running Linux Mint Cinnamon 21.3 as my desktop OS. Last update of systemd was 2025-10-10. I plan to deny the next upgrade and have it ignore all future upgrades. Does that sound like a good plan?

Did artix also remove maschine-id? or was it Debian only?

I mean first thing you touch and logs are binary that can be read only with special utility. You immediately imagine extreme surplus of way it can go sideways and you break a line sweat

that is why internet servers that run Linux don't use systemd nor dbus

Looks like I'm pretty aligned with Devuan thoughts.

A similar exploit once existed on Windows, which one could trigger with the task-scheduler. Having to wait 10-30 days without knowing when it would happen is rather an impractical attack suface. Technically possible is far from likely.

systemd is the only init you can exclude. How much interest is there among 'nix users to exclude systemd? Click to see Linux distros with the Mate desktop, without systemd.

instant karma

I'm gonna leave this here.

It’s okay cuz they focused their efforts on this gay ass age verification related thing

yep, moved to Devuan on my NAS and never looked back

Cystmd

so in order to perform this attack, you need a user on that distro. Seriously, who gives access to ssh to a Linux distro in order to perform this attack ?

Us MX Linux, you boot sysvinit by default but can still choose systemd from GRUB if you want to boot a systemd session (you can also swap the default behavior)

Is it a bug in systemd Or something else