Re: More systemdCrap

On 2025-03-11 16:59, John Ames wrote:

On Tue, 11 Mar 2025 15:50:25 +0000
Pancho <Pancho.Jones@protonmail.com> wrote:
 

Carlos has already suggested that there might be a method to
cryptographically sign the logs, making alterations very difficult,
even to a privileged user.

 Perhaps there is - but, as has already been pointed out, if journalctl
can delete records by date, it is certainly *possible* to delete
records by source. Any encryption that does not prevent the former
cannot prevent the latter.

It can delete by date, but only from the distant end of the log, not on the middle.
--
Cheers, Carlos.