Re:Systemd, ten years later: a historical and technical retr...
by Supermancho on Monday May 04, 2020 @02:40PM
(#23071672)
> https://lwn.net/Articles/512895/
the binary logs handled by the systemd journal can be "sealed" at regular time intervals. That seal is a cryptographic operation on the log data such that any tampering prior to the seal can be detected.
This might be news to some people.
I thought the reasoning was to make logs harder (or impossible) to tamper with.
Something something about trading freedom for security.