(In reply to Dirk Mueller from comment #3) > haproxy has implemented the sd-notify protocol without systemd: > > https://git.haproxy.org/?p=haproxy.git;a=commitdiff; > h=aa3632962f2032063e76c0fe99085e83a947fedb As written, this will not help, we still have other patches which requires sshd to be linked against libsystemd, and libsystemd will be loaded via dlopen() anyways. Which opens the question: does the backdoor work, if liblzma is loaded as dependency via dlopen()?