> compromising systemd, forcing it to re-sign the logs (assuming that practicable.) This is completely unfeasible. The point of FSS is that you sign the logs,

> compromising systemd, forcing it to re-sign the logs (assuming that practicable.) This is completely unfeasible. The point of FSS is that you sign the logs, create a new key using your old one, and then permanently throw away the old key. Once this is done, no matter what control you have on the system, you cannot re-sign the logs without the tampering being obvious.