Luca Boccassi 4a82fc67c6 homed/fscrypt: add new xattr format hardening key sealing ...

The current key sealing format has some less-than-ideal weaknesses:

- PBKDF2 with only 65k iterations, where recommendations are ~200k
- AES with null IV, relying on salt for uniqueness
- lack of AES MAC/AEAD

However improbable, it is at least theorically possible that with
a lot of resources an offline bruteforce could be attempted.

Add a v2 sealing format, keeping unsealing compatibility with
the current format:

 v2:<iterations>:<salt>:<IV>:<ciphertext>:<aes tag>

and use 600k iterations for the PBKDF2 sha512

2026-05-19 13:35:19 +01:00

..

_data

docs: update external links

2026-01-31 01:11:11 +09:00

_includes

docs: update footer to 2026

2026-04-14 17:32:37 +01:00

_layouts

…

assets

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

fonts

…

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

Revert "docs: don't suffix page permalink with a slash"

2024-04-17 20:53:49 +02:00

.gitattributes

…

.gitignore

…

API_FILE_SYSTEMS.md

docs: update external links

2026-01-31 01:11:11 +09:00

APPSTREAM_BUNDLE.md

sysupdate: Support changelogs & appstream metadata

2024-07-12 14:38:09 +01:00

ARCHITECTURE.md

Fix wording in two places

2026-02-09 11:01:15 +01:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: update external links

2026-01-31 01:11:11 +09:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

docs: update external links

2026-01-31 01:11:11 +09:00

BOOT_LOADER_INTERFACE.md

boot,vconsole: Propagate UEFI HII keyboard layout to the OS

2026-05-11 21:10:11 +02:00

BOOT_LOADER_SPECIFICATION.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

BOOT.md

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

BUILDING_IMAGES.md

docs: update external links

2026-01-31 01:11:11 +09:00

CATALOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

docs/CODE_OF_CONDUCT: format text

2024-03-27 07:11:55 +01:00

CODE_QUALITY.md

ci: Drop codeql workflow

2026-03-24 17:55:26 +01:00

CODING_STYLE.md

basic/stdio-util: introduce asprintf_safe

2026-03-06 17:46:59 +01:00

CONTAINER_INTERFACE.md

docs: fix capability name, it's CAP_MKNOD not CAP_SYS_MKNOD (#41621)

2026-04-13 16:41:33 +01:00

CONTRIBUTING.md

docs: document AI use disclosure consistently

2026-03-16 10:55:02 +01:00

CONTROL_GROUP_INTERFACE.md

docs: update external links

2026-01-31 01:11:11 +09:00

CONVERTING_TO_HOMED.md

docs: update external links

2026-01-31 01:11:11 +09:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: update external links

2026-01-31 01:11:11 +09:00

CREDENTIALS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DAEMON_SOCKET_ACTIVATION.md

docs/DAEMON_SOCKET_ACTIVATION

2024-06-03 15:22:54 +09:00

DEBUGGING.md

docs: update external links

2026-01-31 01:11:11 +09:00

DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DISCOVERABLE_PARTITIONS.md

…

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

docs: update external links

2026-01-31 01:11:11 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

vmspawn,journal-remote: add journal forwarding disk usage options

2026-04-22 20:05:38 +02:00

FACTORY_RESET.md

docs: document factory reset logic

2025-03-05 12:38:30 +01:00

FAQ.md

docs: update external links

2026-01-31 01:11:11 +09:00

favicon.png

…

favicon.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

FILE_DESCRIPTOR_STORE.md

LUO: add support for preserving third party sessions

2026-05-15 13:46:08 +01:00

GOVERNANCE.md

docs: add a governance document

2025-09-24 08:48:17 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

docs: Add explicit reference to unprivileged userns docs of mkosi

2025-12-28 09:31:47 +00:00

HOME_DIRECTORY.md

homed/fscrypt: add new xattr format hardening key sealing

2026-05-19 13:35:19 +01:00

INCOMPATIBILITIES.md

docs/INCOMPATIBILITIES: fix typo

2026-02-09 02:36:50 +01:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

fix list of inhibitor lock types

2026-03-28 20:57:52 +00:00

INITRD_INTERFACE.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_EXPORT_FORMATS.md

docs: update external links

2026-01-31 01:11:11 +09:00

JOURNAL_FILE_FORMAT.md

docs: wrap bare enum constants in inline code in JOURNAL_FILE_FORMAT

2026-03-12 09:37:24 +01:00

JOURNAL_NATIVE_PROTOCOL.md

docs: update external links

2026-01-31 01:11:11 +09:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE.md => PRESSURE.md

2026-04-09 22:47:10 +02:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: update external links

2026-01-31 01:11:11 +09:00

NETWORK_ONLINE.md

docs: update external links

2026-01-31 01:11:11 +09:00

OPTIMIZATIONS.md

docs: update external links

2026-01-31 01:11:11 +09:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

PORTABILITY_AND_STABILITY.md

units: restore runlevel[0-6].target aliases

2026-02-01 09:40:10 +01:00

PORTABLE_SERVICES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESET.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESSURE.md

docs: Fix window in PRESSURE.md

2026-04-09 22:47:10 +02:00

RANDOM_SEEDS.md

docs: update external links

2026-01-31 01:11:11 +09:00

RELEASE.md

docs: note step to update obs workflow file on release

2026-02-09 09:36:53 +01:00

RESOLVED-VPNS.md

docs: update external links

2026-01-31 01:11:11 +09:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

rootfs-discovery-flow.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

SECURITY.md

docs: beef up SECURITY.md rules for reporting

2026-04-10 17:34:03 +02:00

SEPARATE_USR_IS_BROKEN.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

style.css

docs: contain image sizing and prevent overflow on mobile

2026-03-12 09:38:03 +01:00

SYSLOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs/SYSTEMD_FILE_HIERARCHY: format text

2024-03-27 07:17:08 +01:00

sysupdate-objects.svg

docs: Add a diagram for the internals of sysupdate

2026-01-30 13:19:33 +09:00

TEMPORARY_DIRECTORIES.md

docs: update external links

2026-01-31 01:11:11 +09:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

docs: update external links

2026-01-31 01:11:11 +09:00

TIPS_AND_TRICKS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

TPM2_PCR_MEASUREMENTS.md

docs: document the "verity" NvPCR measurements

2026-03-02 23:26:21 +00:00

TRANSIENT-SETTINGS.md

cgroup: Add CPUSetPartition= setting

2026-05-14 08:55:44 +02:00

TRANSLATORS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

UIDS-GIDS.md

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

USER_GROUP_API.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_RECORD_BLOB_DIRS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

USER_RECORD.md

userdb: add birthDate field to JSON user records

2026-03-18 17:33:22 -04:00

USERDB_AND_DESKTOPS.md

docs: update external links

2026-01-31 01:11:11 +09:00

VARLINK.md

docs: clarify when to use varlink enum types vs plain strings

2026-04-14 13:37:02 +02:00

VM_INTERFACE.md

docs: fix typo

2024-03-15 04:04:01 +09:00

WRITING_DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_DISPLAY_MANAGERS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

docs/WRITING_NETWORK_CONFIG_MANAGERS: format text

2024-03-27 07:31:54 +01:00

WRITING_RESOLVER_CLIENTS.md

docs/WRITING_RESOLVER_CLIENTS: update manpage link

2024-03-27 07:11:50 +01:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: fix misleading VM/machined documentation

2026-04-02 12:55:33 +02:00