Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail From: John Ames Newsgroups: comp.os.linux.misc Subject: Re: More systemdCrap Date: Tue, 11 Mar 2025 08:59:26 -0700 Organization: A noiseless patient Spider Lines: 12 Message-ID: <20250311085926.000056b7@gmail.com> References: <20250310152856.00004b5a@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Injection-Date: Tue, 11 Mar 2025 16:59:29 +0100 (CET) Injection-Info: dont-email.me; posting-host="b98db532b15d665a660acfaa62855cd3"; logging-data="2082772"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/xJhxAQ1kRb4afgaXaqvjbmf6RWSb3uVA=" Cancel-Lock: sha1:r5RGka5HW0YzgYFJdoB2nQFyIkU= X-Newsreader: Claws Mail 4.3.0 (GTK 3.24.42; x86_64-w64-mingw32) Bytes: 1796 On Tue, 11 Mar 2025 15:50:25 +0000 Pancho wrote: > Carlos has already suggested that there might be a method to > cryptographically sign the logs, making alterations very difficult, > even to a privileged user. Perhaps there is - but, as has already been pointed out, if journalctl can delete records by date, it is certainly *possible* to delete records by source. Any encryption that does not prevent the former cannot prevent the latter.