2 ms·
My limited understanding of the whole thing is that journald use a chain of signatures to verify journal integrity. Meaning that the first key is used to sign
by digi_owl 10y ago
My limited understanding of the whole thing is that journald use a chain of signatures to verify journal integrity.
Meaning that the first key is used to sign a new key that signs the journal entry and the next key that sign yet another key and entry etc etc etc. And that by having the initial key handy one can at any time walk through the journal to verify that it has not been tampered with.
The whole QR thing it there to allow a would be admin to quickly transfer the initial key to their smartphone or similar by scanning the code.
As for Torvalds being a Fedora user, my impression is that his usage needs are fairly modest these days. He spends most days reading emails via gmail, and approve commits to the kernel code housed on the kernel.org servers.
- i336_ 10y agoI see, interesting. For what it's worth that's pretty cool. I never even thought of the idea of a verifiable system boot log... It's almost sad systemd has some good points. Heh. I vaguely recall a video that noted where Torvalds was at nowadays; he seems to mostly be in administration/management now, as opposed to low-level hacking. Must be an interesting position to be in.