]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] rem: pkg: Implement the systemd notification protocol manually to remove depen...
authorAydın Mercan <aydin@isc.org>
Tue, 3 Jun 2025 15:05:10 +0000 (15:05 +0000)
committerAydın Mercan <aydin@isc.org>
Tue, 3 Jun 2025 15:05:10 +0000 (15:05 +0000)
commit4f7e806a12b9163c3fe9e4ea70e86e7f2d6e57da
treec4bf5eae042f741d182e0bd32cbe49dfa0dc3053
parent2320213c1b69abf5ffc9c957330e0d3a242e79ac
parent41ff6969f6f0070e3a00919d0cb365476fce785b
[9.20] rem: pkg: Implement the systemd notification protocol manually to remove dependency on libsystemd.

libsystemd, despite being useful, adds a huge surface area for just
using the sd_notify API. libsystemd's surface has been exploited in the
past [1].

Implement the systemd notification protocol by hand since it is just
sending newline-delimited datagrams to a UNIX socket. The code shouldn't
need more attention in the future since the notification protocol is
covered under systemd's stability promise [2].

We don't need to support VSOCK-backed service notifications since they
are only intended for virtual machine inits.

[1]: https://www.openwall.com/lists/oss-security/2024/03/29/4
[2]: https://systemd.io/PORTABILITY_AND_STABILITY/

Backport of MR https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/10263

Merge branch 'aydin/standalone-notification-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!10454