| |||||||||||||
Forward secure sealingForward secure sealingPosted Aug 28, 2012 14:48 UTC (Tue) by mathstuf (subscriber, #69389)In reply to: Forward secure sealing by ikm Parent article: Forward secure sealing
> The only missing piece is what to do in case the system goes down. All log data before the system came up can then be erased with a plausible explanation that the system was down at that time. If an attacker gains entry, he can erase all traces of his activity and hard-reboot the machine once he's done, making everything look like it was a hardware failure. I wonder if journald accounts for that.
Well, systemd is the first thing running in these situations. Conceptually, it could do the sealing before starting anything else. The only leak I can think of there is if systemd itself is compromised in which case you're SOL anyways. In the general case, it might be an issue.
(Log in to post comments)
|
|||||||||||||