Page MenuHomeLubuntu Development

Tj (Tj)
User

Projects

User does not belong to any projects.

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Thursday

  • Clear sailing ahead.

User Details

User Since
Jun 18 2019, 5:02 PM (21 w, 6 d)
Availability
Available

Recent Activity

Aug 10 2019

Tj added a comment to T108: Drop or change pkexec patch in Calamares.

So what you're suggesting is effectively splitting Calamares so it has a system process presumably exposing a DBus API for its client (user) process to call to do privileged operations ?

Aug 10 2019, 6:02 AM · Development Team

Aug 3 2019

Tj added a comment to T32: Make checksum verification automatic.

I've been doing some proof-of-concept work recently but currently cannot experiment with FEC because the Ubuntu kernels aren't being built with FEC enabled. I'm going to chase apw on this one.

Aug 3 2019, 8:28 AM · Development Team
Tj added a comment to T87: Calamares: Address security issue related to FDE.

What, specifically, is a postinst script intended to deal with? The unconditional use of UMASK=0077 and removing it? Applying it if not already used?

Aug 3 2019, 7:07 AM · Development Team

Aug 1 2019

Tj added a comment to T87: Calamares: Address security issue related to FDE.

@apt-ghetto As with all ./conf.d/ parsing is in lexical order and in well-behaved packages uses the C locale rather than a regional locale to assure that the evaluation order is predictable.

Aug 1 2019, 5:13 AM · Development Team
Tj added a comment to T87: Calamares: Address security issue related to FDE.

@apt-ghetto I'd recommend modifying the Calamares bug because it is partially incorrect.

Aug 1 2019, 4:45 AM · Development Team

Jul 19 2019

Tj added a comment to T87: Calamares: Address security issue related to FDE.

/etc/initramfs-tools/initramfs.conf UMASK=0077 is the correct fix for the user-reading-initrd.img issue.

Jul 19 2019, 3:09 PM · Development Team

Jun 27 2019

Tj added a comment to T32: Make checksum verification automatic.

Adding a link to a very detailed guide to using dm-verity.

Jun 27 2019, 2:39 PM · Development Team

Jun 21 2019

Tj added a comment to T22: Bring those swaps back.

If you're going to create a swap *file* then I'd strongly recommend it be the *first* thing done after the root file-system has been created - before any other files have been written to the file-system.

Jun 21 2019, 3:38 PM · Development Team

Jun 19 2019

Tj added a comment to T32: Make checksum verification automatic.

This sounds like something that dm-verity would be ideal for. It is for read-only devices and uses a kernel layer to ensure the block device reads match the hashes.

Jun 19 2019, 10:01 AM · Development Team

Jun 18 2019

Tj requested review of D15: Work around update-initramfs issue and reorder jobs.
Jun 18 2019, 10:09 PM