On Fr, 06.12.19 00:39, Kevin Kofler (kevin.kofler(a)chello.at) wrote:
Lennart Poettering wrote:
> No it does not protect against offline modification. That's why
> dm-integrity exists after all.
How do you want to modify an encrypted file system without being able to
decrypt or encrypt anything?
If you know where stuff is located you can change individual blocks in
files. You are not going to know what you are changing them to, but
you can change it and traditional files will not detect that you did that.
Lennart
--
Lennart Poettering, Berlin