@zbyszek@fosstodon.org

Zbigniew Jędrzejewski-Szmek @zbyszek@fosstodon.org

· 8mo ago

I'm very happy to announce that I'm now part of Amutable (@amutable@masstodon.social), a new new company building Linux systems, working together with @rodrigo_rata@mastodon.social @davidstrauss@mastodon.social @michaelvogt@mastodon.social @pothos@fosstodon.org @brauner@mastodon.social @daandemeyer@mastodon.social @blixtra@hachyderm.io @cyphar@mastodon.social @pid_eins@mastodon.social @jrocha@floss.social 🚀🚀🚀

#amutable #linux #systemd #⊼mutable #integrity

mastodon.social

Amutable: "Today we announce Amutable and our mission to del…" - Mastodon

12

0

7

0

Zbigniew Jędrzejewski-Szmek @zbyszek@fosstodon.org

· 6mo ago

@marcelschmall@infosec.exchange @heine@chaos.social

This might help: we recently made the libsystemd macros to expose dlopen metadata public (https://github.com/systemd/systemd/pull/41047).

The parts to actually _use_ dlopen in a convenient way hasn't been made public. But I think it'd make sense to do that, especially if some potential users ask for it.

chaos.social

heine (@heine@chaos.social) - chaos.social

0

Zbigniew Jędrzejewski-Szmek @zbyszek@fosstodon.org

· 8mo ago

Replying to

@tor The threat model is any exploit (or bug!) that leads to persistent modification of the software stored on disk. The idea is that after a reboot, you _know_ what software was started (or the attestation fails). The hardware is off-the-shelf standard stuff, only needs a TPM. This is about the integrity of the OS and its payload.

0

1

0

Zbigniew Jędrzejewski-Szmek @zbyszek@fosstodon.org

· 5mo ago

Replying to

@Valentin@mastodon.social @pid_eins@mastodon.social If ldconfig is running, that means that /usr timestamp was not set up properly. It should not run after a clean install.

0

2

0