2 ms·
The concept also feels similar to Qubes OS.
by close04 8y ago
The concept also feels similar to Qubes OS.
- niutech 8y agoAccording to https://clip-os.org/en/ https://clip-os.org/en/ the differences with Qubes OS are: 1. The main mechanism for environment isolation is different: a) CLIP OS leverages Linux kernel primitives to create containers with the help of additional features brought by Vserver, Linux kernel hardening (grsecurity for version 4) and a tailored Linux Security Module (LSM). This approach allows a fine-grained control on the data exchanges between isolated environments (e.g., handling a notion of files, processes and sockets) and permissions (e.g., restriction to ring 3 features for malicious code, limitation on the allowed system calls). b) Qubes OS leverages hardware based virtualization with an hypervisor (Xen), and a main virtual machine (dom0) which is a GNU/Linux system with services handling data exchange between virtual machines. 2. Administrators have different roles and power: a) Administrators on a CLIP OS system are not able to compromise system integrity nor access user data. They can only access a restricted set of configuration options. b) On Qubes OS systems, the main user of each virtual machine is also the administrator of its own environment. The system administrator of the main domain (dom0) can change all the configuration options and may access all user data without any restriction.
- mtgx 8y agoSo it seems closer to Subgraph OS (except for the Tor usage): https://subgraph.com/sgos/ https://subgraph.com/sgos/
- Timothycquinn 8y agoSaw the same. The thing I like about Qubes OS is that they are trying to move to an OS / hypervisor agnostic model. I personally would love to see Qubes on freenas driving Jails.