this post was submitted on 29 Apr 2026
33 points (94.6% liked)

Linux

64988 readers
409 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
 

I’m not writing this to criticize the uutils team. Quite the contrary; I actually want to thank them for sharing the audit results in such detail so that we can all learn from them.

top 6 comments
sorted by: hot top controversial new old
[–] trevor@lemmy.blahaj.zone 11 points 2 days ago* (last edited 2 days ago)

This is an excellent article that breaks down common pitfalls and provides really concise rules for preventing them. It's a great read if you're in to systems programming.

[–] doodoo_wizard@lemmy.ml 4 points 2 days ago

Another stupendous reason to gpl uutils so that the decades of experence of hundreds of system programmers can be leveraged in the rewrite.

[–] onlinepersona@programming.dev 6 points 2 days ago (2 children)

Those are bugs I dont think any programming language catch, unless it's a DSL for writing such programs on Linux or another OS.

[–] novafunc@discuss.tchncs.de 4 points 2 days ago* (last edited 2 days ago)

It could be improved. Sebastian Wick and Lennart Poettering made comments on how hard POSIX makes it hard to be secure. There are better APIs that try to be safer.

And since uutils is not Linux only, it can't use these safer APIs directly, or at least not without writing more platform-specific code.

[–] atzanteol@sh.itjust.works 2 points 2 days ago

Some of them seem to be harder to fix or to get right in Rust than C though. Mostly due to "convenience" methods that make application writing easier.

[–] stoicEuropean@lemmy.ml 5 points 2 days ago

As someone who is not at all into programming, this title made me genuinely think I had a stroke.