hesela.devfs-verity
fs-verity is a Linux filesystem facility that verifies the immutable contents of selected files against a cryptographic file digest.
Its digest binds a descriptor including file size, not only the Merkle root. Authentication policy is separate from enabling verification. [1]
Relations
- related
- merkle-tree, dm-verity, dm-integrity
Limitations
- Names, ownership and mode are outside its measurement; requiring signatures for verity files does not require every file to use verity. [1]