Post #2471528

2026-05-05 05:29 UTC

@thesamesam@social.treehouse.systems The AF_ALG and keyring dependency of iwd can be fixed much more easily than the poor code quality of wpa_supplicant.

Replies (1)

@thesamesam@social.treehouse.systems 2026-05-05 08:17

@alwayscurious@infosec.exchange Could you elaborate a little bit? If the answer is "go look around at and it is obvious" then fine, but wondering if you have some bits in mind? I'm asking because it's a big change for me to start lobbying "internally" to push people away from iwd, and also because iwd itself was quite married in the past to its current approach. wpa_supplicant on the other hand is an older codebase but it does support privilege separation, and does get actively developed; though it rarely makes releases, including for serious bugs or security issues, so backports are required. But I've spent very little time looking at wpa_supplicant/hostapd's codebase other than when massaging some patches.

Open ##2471529