Post #2040177

2026-05-03 19:35 UTC

@alwayscurious Could you share a bit more detail on your wpa_supplicant thoughts? There's a lot of reevaluation of iwd right now and I'm interested in what you had in mind. (re https://www.openwall.com/lists/oss-security/2026/05/01/12)

Replies (2)

@zwol@masto.hackers.town 2026-05-03 19:49

@thesamesam@social.treehouse.systems Related thing I just noticed: in , GENTOO_LINUX_INIT_SYSTEMD forces CRYPTO_USER_API_HASH on. As far as I can tell from systemd's documentation, this is unnecessary (CRYPTO_USER_* appear nowhere in https://github.com/systemd/systemd/blob/main/README). And there's a whole bunch of other kernel config options in a similar boat -- either not needed at all, or only needed for rarely used systemd features. It'd be nice to break this up and have it only force the truly mandatory options.

Open ##2471526
@alwayscurious@infosec.exchange 2026-05-05 05:29

@thesamesam@social.treehouse.systems The AF_ALG and keyring dependency of iwd can be fixed much more easily than the poor code quality of wpa_supplicant.

Open ##2471528