Security Based OS ?

[NobodyNew1]

Hello,
Does anyone think there will be a security type of OS built for the pinephone, like a Graphene but for the phinephone ? I'm sort of into that type of stuff and figure the phonephone would be a great platform to build something like that on.I could be wrong, and maybe I'm dreaming of something that can't or won't be created.

[User 18618]

Any Linux image available for the PinePhone is more secure than Android.

You can look into hardening the kernel and other applications. You may also consider AppArmor, SELinux, firejail and other security measures you want to use. Some are built into a given distribution, others requires manual intervention, and a few will be incompatible with each other.

A couple of Wiki articles regarding hardening:

• Debian
  
• Arch
  

For what it's worth, I believe Mobian (Debian), postmarketOS (Alpine Linux) and Fedora will be the most secure. Ubuntu Touch by UBports has an immutable filesystem, if you value that.

Review the list of operating systems and go from there.

[NobodyNew1]

Any Linux image available for the PinePhone is more secure than Android.

You can look into hardening the kernel and other applications. You may also consider AppArmor, SELinux, firejail and other security measures you want to use. Some are built into a given distribution, others requires manual intervention, and a few will be incompatible with each other.

A couple of Wiki articles regarding hardening:

• Debian
  
• Arch
  

For what it's worth, I believe Mobian (Debian), postmarketOS (Alpine Linux) and Fedora will be the most secure. Ubuntu Touch by UBports has an immutable filesystem, if you value that.

Review the list of operating systems and go from there.

Thank you !!! I appreciate your response. Like some I'm new to linux and the pinephone, I look into and read more about Mobian and PMOS.

[bcnaz]

You could check out Pure OS, that was/is being written for the Librem phone billed as a secure phone.

[User 18618]

Note that PureOS is just Debian without access to the contrib or nonfree repositories (at least, from Purism). I believe they also compile the programs themselves, not using Debian's binaries.