8️⃣ Here's the 8th post highlighting key new features of the upcoming v257 release of systemd.
A longer time ago systemd introduced JSON based user records as an extension of classic UNIX `struct passwd`. These records can be provided via Varlink IPC or via drop-in files. The much richer set of account settings is documented here:
At Linux' best conference, All Systems Go! 2024 in Berlin this year I gave a (brief) talk about Varlink, and why you should consider it. If you want to know more about the concept, this might be a good starting point:
https://media.ccc.de/v/all-systems-go-2024-276-varlink-now-
And that's all for now, enjoy!
Had fun in at #OSSSummit in Tokyo yesterday demonstrating a TPM interposer attack obtaining the systemd cryptenroll boot keys
And also explaining how the new Linux Kernel TPM patches can help defeat this
For those who asked, my python3 interposer designed to steal the keys is here:
https://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpm2-interposer.git/
Thus is the video of my TPM interpose presentation and demo at #OSSummit
Adding uchar.h to picolibc today. Instead of providing useful conversions between UTF-8, UTF-16 and UTF-32, all C23 provides is conversions between those and the awful "multibyte" representations. I can understand why they'd *also* want to connect UTF encodings to the legacy C APIs, but the most important thing we need is a way to validate UTF-8 input which has some pretty tricky corner cases involving missing bytes, overlong encodings, and surrogates. https://github.com/picolibc/picolibc/pull/861