git://git.nikiroo.be / gofetch.git / blame
| Commit | Line | Data |
|---|---|---|
| 1aaa6ba3 NR |
1 | 0[$] Protecting files with fs-verity null/LWN/0000763729 70\r |
| 2 | i [Kernel] Aug 30, 2018 18:50 UTC (Thu) (corbet)\r | |
| 3 | i\r | |
| 4 | i The developers of the Android system have, among their many\r | |
| 5 | i goals, the wish to better protect Android devices against\r | |
| 6 | i persistent compromise. It is bad if a device is taken over by\r | |
| 7 | i an attacker; it's worse if it remains compromised even after a\r | |
| 8 | i reboot. Numerous mechanisms for ensuring the integrity of\r | |
| 9 | i installed system files have been proposed and implemented over\r | |
| 10 | i the years. But it seems there is always room for one more; to\r | |
| e818d449 NR |
11 | i fill that space, the [1]fs-verity mechanism is being proposed\r |
| 12 | i as a way to protect individual files from malicious\r | |
| 13 | i modification.\r | |
| 14 | i \r | |
| 15 | i \r | |
| 16 | i \r | |
| 17 | i [1] https://lwn.net/ml/linux-fsdevel/20180824161642.1144-1-ebi-\r | |
| 18 | i ggers@kernel.org/\r | |
| 1aaa6ba3 | 19 | i\r |