Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Raito Bezarius (raito@nixos.paris)'s status on Thursday, 29-Jun-2023 11:53:40 JST Raito Bezarius

PSA: https://github.com/NixOS/calamares-nixos-extensions/security/advisories/GHSA-3rvf-24q2-24ww
If you installed #NixOS using the graphical *Calamares* installer on a non EFI system with a LUKS rootfs or have any LUKS partition which is not a rootfs.
Your LUKS encryption key has been exposed in the /boot partition, potentially unencrypted or encrypted via GRUB cryptodisk.
We consider this to be a serious vulnerability and we are disclosing it immediately as it was found in the Heads project.
We are exploring automatic remediation in https://github.com/NixOS/nixpkgs/pull/240411.
In conversation Thursday, 29-Jun-2023 11:53:40 JST from nixos.paris permalink
Attachments
1. Untitled attachment
2. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  
  nixos/luks: offer rekeying procedure at early boot time by RaitoBezarius · Pull Request #240411 · NixOS/nixpkgs
  
  Description of changes Due to GHSA-3rvf-24q2-24ww We decided to offer rekeying procedures in NixOS based on nixos.rekey command line argument at boot in stage 1. This is automatically enabled if we...

Feeds