roots/wiki
1
0
Fork 0
mirror of https://github.com/PhyllomeOS/wiki.git synced 2024-12-22 05:35:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: update phyllomeos/security

Browse Source
This commit is contained in:
lukas 2022-01-31 12:50:39 +00:00
parent 37885fe868
commit fab568d91e
1 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
phyllomeos/security.md
View File

@ -2,7 +2,7 @@
title: Security in Phyllome OS title: Security in Phyllome OS
description: description:
published: true published: true
date: 2022-01-31T12:35:54.544Z date: 2022-01-31T12:50:37.829Z
tags: tags:
editor: markdown editor: markdown
dateCreated: 2022-01-31T12:35:54.544Z dateCreated: 2022-01-31T12:35:54.544Z
@ -10,7 +10,32 @@ dateCreated: 2022-01-31T12:35:54.544Z
# Security in Phyllome OS # Security in Phyllome OS
Currently, Phyllome OS does **not** provide any kind of encryption by default at the host level. Filesystem-level encryption is just one line of defense. For any virtual disks that contains personal data, users are strongly advised to use full-disk encryption as provided by their guest operating system. > *Phyllome OS is currently in alpha stage. It should not be used to store any sensitive data*
{.is-warning}
Phyllome OS is a Fedora Remix and as such directly inherits every single security measures in place for Fedora-related distributions, such as SELinux. It also brings some unique security-related features.
* **List of of unique security-related features**
* Unprivileged virtual machines with `qemu:///session`, by default
* Filesystem-level encryption with `fscrypt`
* Minimal installations
* **Planned features**
* Unattended installation of security updates
* `systemd` hardening
* `gnome-shell` hardening
## Features
### Data at-rest encryption
Currently, Phyllome OS does **not** provide any kind of encryption by default at the host level.
It provides early support for Filesystem-level encryption, which is just one line of defense.
For any virtual disks that will contain personal data, users are strongly advised to use full-disk encryption as provided by their guest operating system.
--- ---