Post #1103679

2026-04-09 10:33 UTC

@ska Mades me wonder how well it works for OpenRC given it supports both styles (although just READY=1 of NOTIFY_SOCKET, which uuhh I guess hints there's more than that… why???).

Replies (1)

@ska@social.treehouse.systems 2026-04-09 10:42

@lanodan@queer.hacktivis.me I assume OpenRC doesn't authenticate the pid that connects to the notification socket, which isn't a problem in practice. If OpenRC wanted to fully harden against evil services notifying readiness for other services, its supervisor would need to add a whole layer of complexity for that. But even then, I don't think it would need a synchronization mechanism, because who cares if the notifier is still around, as long as the main pid is? s6's new s6-notify-fd-from-socket binary, doing the systemd-to-s6 protocol conversion, mitigates the problem by only using autobind with abstract sockets, so any foreign would-be notifier would need to guess the abstract socket name.

Open ##1103691