@pid_eins I understand, I think I was asking more in the idea of this SAK message having to be secured some way against being intercepted by malicious listeners. I guess I don't really know enough about the situation to actually form a pertinent question, sorry.

At Linux' best conference, All Systems Go! 2024 in Berlin this year I gave a (brief) talk about Varlink, and why you should consider it. If you want to know more about the concept, this might be a good starting point:https://media.ccc.de/v/all-systems-go-2024-276-varlink-now-And that's all for now, enjoy!

4️⃣ Here's the 4th installment of posts highlighting key new features of the upcoming v257 release of systemd.One of the key features of systemd we have talked about in the past years are UKIs, i.e. "unified kernel images", which is a combination of a Linux kernel, an initrd, and more into a single unified PE binary, that can be signed as a whole for SecureBoot, measured as a whole and updated as a whole.In my PoV UKIs are a central concept of securing the Linux boot process.

@pid_eins so I also gave some advice on how apps can detect instantly, but they have to salt sessions using the null seed to benefit from this.

It's that time again! The systemd v257 release is coming closer. Let's restart the "what's new" series of posts for this iteration! Hence:1️⃣ Here's the 1st installment of posts highlighting key new features of the upcoming v257 release of systemd.The traditional Linux user database is a weird thing, rife with anachronisms and weirdnesses. One such thing is that there's a difference between a system account with a locked password, and one with a fully locked account.

@pid_eins Since saying this I discovered that newer versions of the patch use different integers. Phew.Anyway, I sent ntha/obha support for pidfs to lkml, lets see how it goes…