SFOS protection from malware [closed]

asked 2015-11-18 02:19:28 +0200

9968 ●99 ●137 ●145

updated 2015-11-18 02:24:24 +0200

First, the important rule: Don't use anything outside the official Jolla repository, unless you can trust a chosen 3rd party source.

There were already questions about possible harmful 3rd-party Android applications and wether they could access/harm Sailfish OS system files. But what about 3rd-party RPM files? For example from Warehouse/Openrepos.net? While the risk is minimal and there is no known malware around, this could change in the future. Out of interest, I have following questions:

What should one do after installing something nasty? How can it be found? How to stop it? Limited user access certainly helps, but I assume there must be additional security tools in Mer Core (something like AppArmor?).

I don't know much about all these things and it would be interesting to learn how Sailfish OS protects itself. Maybe someone can give a good answer :-)

The question has been closed for the following reason "the question is answered, an answer was accepted" by molan
close date 2018-05-31 11:36:23.554830

Comments

Where are the questions about Android apps that could add spywares on Sailfish OS? As long as LXC is not used for Android apps, I guess there could be a keylogger or screenshot app running in a background process. Here is the question for LXC support: https://together.jolla.com/question/107023/running-android-in-lxc-container/

baptx ( 2019-10-12 22:23:12 +0200 )edit

answered 2015-11-18 11:18:06 +0200

r0kk3rz

10112 ●108 ●186 ●181

For example from Warehouse/Openrepos.net? While the risk is minimal and there is no known malware around, this could change in the future.

Many would argue that the risk is far from minimal, and it is really up to the people that run Openrepos to ensure they aren't hosting malware.

From a sandboxing perspective the XDG-App that Gnome and Freedesktop are doing sounds reasonably interesting, but I think the whole thing hinges on kdbus which we don't have in our kernel version.

edit flag offensive delete publish link

Comments

kdbus is being rewritten as we speak. No official kernel has it yet. Lennart poettering also wrote http://0pointer.net/blog/revisiting-how-we-put-together-linux-systems.html which i find interesting.

ApB ( 2015-11-18 12:50:33 +0200 )edit

@ApB that post from Lennart is what this XDG-App stuff is based upon. Sure it's not something that Jolla can 'just implement' at the moment, but given the control they have over SFOS they can start to bring in some of the ideas from it i think.

r0kk3rz ( 2015-11-18 13:08:08 +0200 )edit

While they might have control on SFOS they don't have control over chipset vendors and the kernel (blobs etc). Most stuff will require a more modern kernel i believe. But SFOS is a damn fine base to start on these stuff. BTRFS is there systemd is there etc.

ApB ( 2015-11-18 14:11:41 +0200 )edit

we have cgroups, and namespaces, so I think a potential solution along these lines is there. SFOS doesn't have to do a lot of the BTRFS related stuff (which won't work on the tablet anyway) with swappable runtime dirs and base OS dirs

r0kk3rz ( 2015-11-18 14:39:40 +0200 )edit

Imho only possible future Sailfish secure system can answer these questions, and there nothing to do with current one.

coderus ( 2015-11-18 14:45:24 +0200 )edit

SFOS protection from malware [answered]

The question has been closed for the following reason "the question is answered, an answer was accepted" by molan
close date 2018-05-31 11:36:23.554830

Comments

1 Answer

Comments

Question tools

Stats

Related questions

SFOS protection from malware [answered]

The question has been closed for the following reason "the question is answered, an answer was accepted" by molan close date 2018-05-31 11:36:23.554830

Comments

1 Answer

Comments

Question tools

Public thread

Stats

Related questions

The question has been closed for the following reason "the question is answered, an answer was accepted" by molan
close date 2018-05-31 11:36:23.554830