News for hackers. Stuff that matters.
Re:Debian for Mobile by danieldk on Tuesday July 27, 2021 @06:55AM (#27970934)
Do you have a threat/security model? Perhaps, the project is not aiming for world dominance. But if it is, it would be nice to have integration with a secure element to store secrets, application sandboxing (so that a chat client cannot read your banking session), etc.
Re:Debian for Mobile by kop316 on Tuesday July 27, 2021 @08:07AM (#27971447)
> Do you have a threat/security model?

Not explicitly no. Implicitly, it would be the same as Debian, and I would argue we go for sane/common sense security defaults.

Is there a particular threat your worried about/want me to comment on?

Re:Debian for Mobile by goodpoint on Tuesday July 27, 2021 @07:46AM (#27971287)
Most daemons are sandboxed by Debian (or upstream) already.

For applications, Debian ships firejail.

Re:Debian for Mobile by zozbot234 on Tuesday July 27, 2021 @08:12AM (#27971491)
AppArmor also allows for some sandboxing, and is enabled by default in Debian stable.
Re:Debian for Mobile by goodpoint on Tuesday July 27, 2021 @11:19AM (#27973492)
AppArmor does very little compared to modern sandboxes.