Path: news.eternal-september.org!eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "Carlos E.R." Newsgroups: comp.os.linux.misc Subject: Re: More systemdCrap Date: Wed, 12 Mar 2025 22:14:57 +0100 Lines: 24 Message-ID: References: <20250310152856.00004b5a@gmail.com> <20250311085926.000056b7@gmail.com> <15111027-9a4c-3a40-96ec-77525c8ce3f6@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: individual.net lIQezXWR6crpMq/eNcQ6DgATs++QIvKnhR0CKyVbZZfXm9oR4o X-Orig-Path: Telcontar.valinor!not-for-mail Cancel-Lock: sha1:79n1GeEd0boxu6PkplgbkWd6obs= sha256:D6xQpylnwas4obkA94jzRW4BUBeSUx/XxnMFE8uiOYw= User-Agent: Mozilla Thunderbird Content-Language: es-ES, en-CA In-Reply-To: <15111027-9a4c-3a40-96ec-77525c8ce3f6@example.net> On 2025-03-11 22:38, D wrote: > > > On Tue, 11 Mar 2025, John Ames wrote: > >> On Tue, 11 Mar 2025 15:50:25 +0000 >> Pancho wrote: >> >>> Carlos has already suggested that there might be a method to >>> cryptographically sign the logs, making alterations very difficult, >>> even to a privileged user. >> >> Perhaps there is - but, as has already been pointed out, if journalctl >> can delete records by date, it is certainly *possible* to delete >> records by source. Any encryption that does not prevent the former >> cannot prevent the latter. > > It is software. Anything in software living on media that is not write > protected can be changed. It just takes kung fu... skill and effort. But nobody has pointed to software that does it. -- Cheers, Carlos.