3 ms·
According to https://clip-os.org/en/ https://clip-os.org/en/ the differences with Qubes OS are: 1. The main mechanism for environment isolation is different:
by niutech 8y ago
According to https://clip-os.org/en/ https://clip-os.org/en/ the differences with Qubes OS are:
1. The main mechanism for environment isolation is different:
a) CLIP OS leverages Linux kernel primitives to create containers with the help of additional features brought by Vserver, Linux kernel hardening (grsecurity for version 4) and a tailored Linux Security Module (LSM). This approach allows a fine-grained control on the data exchanges between isolated environments (e.g., handling a notion of files, processes and sockets) and permissions (e.g., restriction to ring 3 features for malicious code, limitation on the allowed system calls).
b) Qubes OS leverages hardware based virtualization with an hypervisor (Xen), and a main virtual machine (dom0) which is a GNU/Linux system with services handling data exchange between virtual machines.
2. Administrators have different roles and power:
a) Administrators on a CLIP OS system are not able to compromise system integrity nor access user data. They can only access a restricted set of configuration options.
b) On Qubes OS systems, the main user of each virtual machine is also the administrator of its own environment. The system administrator of the main domain (dom0) can change all the configuration options and may access all user data without any restriction.
- mtgx 8y agoSo it seems closer to Subgraph OS (except for the Tor usage): https://subgraph.com/sgos/ https://subgraph.com/sgos/