by
<citerefentry><refentrytitle>journalctl</refentrytitle><manvolnum>1</manvolnum></citerefentry>'s
<option>--setup-keys</option>
- command), forward secure sealing (FSS) for
- all persistent journal files is
- enabled.</para></listitem>
+ command), forward secure sealing (FSS)
+ for all persistent journal files is
+ enabled. FSS is based on <ulink
+ url="http://eprint.iacr.org/2013/397">Seekable
+ Sequential Key Generators</ulink> by
+ G. A. Marson and B. Poettering and
+ may be used to protect journal files
+ from unnoticed
+ alteration.</para></listitem>
</varlistentry>
<varlistentry>
that usually seven rotated journal
files are kept as history. Specify
values in bytes or use K, M, G, T, P,
- E as units for the specified
- sizes. Note that size limits are
+ E as units for the specified sizes
+ (equal to 1024, 1024²,... bytes).
+ Note that size limits are
enforced synchronously to journal
files as they are extended, and need
no explicit rotation step triggered by