

2·
2 months agoI used Magisk for that on LineageOS


I used Magisk for that on LineageOS
I might be wrong, but isn’t encryption done at disk block level, and then the filesystem sits on top of that? Meaning that changing the filesystem to BTRFS will not change the fact that you still have 2 different decryptions to set up.
Why binding specifically to PCRs 1,4,5 and 7? Are they immutable even with updates that modify db and dbx (I think I saw one recently drop on Ubuntu)?