53
openssh on musl linux has been letting people into password-less accounts since 2016 (sshhole.com)
submitted 4 days ago by to c/linux@lemmy.ml
17 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 4 days ago (4 children)

musl is far more POSIX compliant, secure, and cleaner code (no dirty hacks) than glibc. Not everything has to be a culture war. Do you use sudo (ISC-style)? Do you use curl (MIT-style, curl license)? Even OpenSSH isn't GPL (BSD). Not everything is a plot; vulnerabilities happen regardless of what license you pick.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 4 days ago

    Also in addition to that info, I like about musl to be able to compile without relying on glibc, which is a "common" (notice I set it in quotes, don't take it literally) source of dependency problem. Often if there is a glibc dependency problem, then you can't do much about it, because the entire system relies on the correct one. With musl your application doesn't depend on external library.

  • permalink
  • fedilink
  • source
  • parent
  • [–] -1 points 4 days ago (1 child)

    musl is far more ..........., secure, .......

    you are funny. i wish i could attend one of your standups 😹

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •