Re:Debian for Mobile
by danieldk on Tuesday July 27, 2021 @06:55AM
(#27970934)
Do you have a threat/security model? Perhaps, the project is not aiming for world dominance. But if it is, it would be nice to have integration with a secure element to store secrets, application sandboxing (so that a chat client cannot read your banking session), etc.
[ Parent
| on HN ]
> Do you have a threat/security model?
Not explicitly no. Implicitly, it would be the same as Debian, and I would argue we go for sane/common sense security defaults.
Is there a particular threat your worried about/want me to comment on?
Most daemons are sandboxed by Debian (or upstream) already.
For applications, Debian ships firejail.
AppArmor also allows for some sandboxing, and is enabled by default in Debian stable.