The question is in the title: are there truly any security benefits to encrypting the root file system?
For the sake of the question, let's assume that
- our root file system resides on /dev/sda
- the /home directories with all user info is LUKS-encrypted and on a separate drive (/dev/sdb), which is decrypted on boot
- we're dual booting Windows, which sits on a separate partition on /dev/sda
For our attackers, let's assume that
- scenario 1: there is a human attacker with physical access to the machine, but only while it is turned off (i.e. while /dev/sdb is still encrypted). That means he could only modify /dev/sda.
- scenario 2: there is a very sophisticated malware that hits us while we're booted into Windows (i.e. while /dev/sdb is still encrypted). Let's assume this malware can read and modify Linux file systems, so it could modify /dev/sda.
Let's say that both attackers want to access the encrypted files on /dev/sdb. A natural way would be to compromise the Linux system present on /dev/sda, wait for it to have access to the unencrypted data on /dev/sdb and then access it.
Would it be a viable way to mitigate this (hypothetical) threat by encrypting the Linux root file system on /dev/sda, or wouldn't this just make GRUB our next Achilles' heel since that needs to be unencrypted and could still be compromised?
>A collaborative project of the late botanists Erwin Lichtenegger and Lore Kutschera celebrates the power and beauty of these otherwise hidden systems through detailed drawings of agricultural crops, shrubs, trees, and weeds. Digitized by the Wageningen University & Research, the extensive archive is the culmination of 40 years of research in Austria that involved cultivating and carefully retrieving developed plant life from the soil for study. It now boasts more than 1,000 renderings of the winding, spindly roots, some of which branch multiple feet wide.
https://www.thisiscolossal.com/2022/01/wageningen-root-archive/
These are the five root shapes that makeup your CAGED system. The CAGED system is a great way to organize information. Please understand I'm not saying this is the only way to learn the neck. This is what works for me. If you have any ideas how this could be better or clearer please let me know? Thanks. https://www.dropbox.com/s/hqd21n9z0liy7os/Know%20Your%20Root%20Shapes.pdf?dl=0
https://preview.redd.it/v9k27tx9gib81.png?width=960&format=png&auto=webp&s=2a6052595530a5e9f277b9a4eea39a2625436f9c
https://preview.redd.it/xp55htl8gib81.png?width=960&format=png&auto=webp&s=27583862ff2814fb5446cb95209ab8cbbf0490f0
I'v tried to update the System WebView app through Aurora Store but it fails, I need it just for use webapps (https://f-droid.org/en/packages/com.tobykurien.webapps/).
I'm not sure how it works and I'v doubt that it use sytem webview.
I'v tried to search on the net a solution but I didn't find nothing, I know that the issue is know from A10 .
Thanks
