Aaravchen :linux: :suspicious:

Does anyone know how booting Linux in FIPS mode gains any use or security from the `.vmlinuz.hmac` file? The interweb has no info at all.

It's a basic SHA of the vmlinuz file, but it has no way to verify authenticity or integrity of the hash, and is distributed with the thing it supposedly verifies. How does that have any purpose?

#cybersecurity #security #infosec #InfosecCommunity #askInfosec

@suprjami
`make --dry-run` prints but doesn't run the commands. Bear wraps the compiler calls to intercept them, so it requires you to actually call the compiler.

The whole problem is that there's no way to get the includes and dependencies unless you do all the preprocessing, which is a portion of the way into compiling. You could add the compiler flag to only do pre-processing, but you'll only save a little time versus a full compile.

#cprogramming #gcc #clang #llvm #ccls

@RockyC
Ah, that makes a lot of sense. Have you looked at #Tdarr or #sickbeard_mp4_automator (not sickbeard or MP4 exclusive) that will automatically convert content when it's added?
#transcode