#allsystemsgo re "A Security Model for systemd" the one little thing that really stood out for me was "WX for filesystems". how did i not think about it that way before? this makes total sense as a policy for secured immutable systems
https://media.ccc.de/v/all-systems-go-2025-354-a-security-model-for-systemdLinux lacks a coherent security model, and by extension we never defined one for t...
Updates are a critical piece of managing your fleet of devices. Nowadays, Yocto-based distributions can utilize layers for well-established update mechanisms.
Day one of All Systems Go is now over, and we’re chilling at the social event. Tomorrow, my colleague @berto will present his work on Dirlock in the afternoon, don’t miss it!
In the Linux world there are several tools and technologies to encrypt data on a hard drive, most falling into one of two categories: block device encryption (like LUKS) or stacked filesystem encryption (like EncFs or gocryptfs).
In the Linux world there are several tools and technologies to encrypt data on a hard drive, most falling into one of two categories: block device encryption (like LUKS) or stacked filesystem encryption (like EncFs or gocryptfs).
