search

SerenityOS / serenity

The Serenity Operating System 🐞
https://serenityos.org
BSD 2-Clause "Simplified" License
30.46k stars 3.18k forks source link

Is there any hardening or hard disk encryption supported? #24852

Open FerielNot1 opened 2 months ago

FerielNot1 commented 2 months ago

i am new to the community and i am interested in this project. i don't know lot about it's internals and i am wondering is there any hardening or selinux-like stuff also is hard disk encryption supported (luks || lvm || TPM Encryption || idk)?

ADKaster commented 2 months ago

https://man.serenityos.org/man7/Mitigations.html

supercomputer7 commented 1 month ago

I usually don’t talk about how we should implement such feature or another in the bug tracker. I will just say that in my opinion, filesystem encryption support in the kernel is not something I’d want to see honestly because I think it’s a waste of time - I never used it on Linux, and the more reasonable approach is to examine either FUSE-based solution or a system-integrated solution (say, you encrypt a file and then encapsulate it with a special header so the OS will know that it needs to invoke a special interpreter, just like ELF). If you actually look for encryption in the block device level, that’s more likely to be a good thing to do, but probably not any time soon. Out of curiosity, can I ask why you need these features in a non-released OS project though?