@ska after learning that systemd's behavior regarding shlib dynamic loading was critical to the xz-utils vuln and poettering's response was to say we need to add more restrictions on who can make a service but not to examine systemd's policies for library loading i think it's quite curious that he's now chief engineer at a corporation which defines mutability as problematic