Securing / Hardening The PinePhone
#1
I'd love to know what people are doing as far as security tweaks for the pinephone. Not that I need anything like CalyxOS or Graphene type of phone, but I'd like to put a little VPN on it as it can only be used for a pocket linux. I don't have the skill set to really work on the phone like others, but maybe one day I will.
#2
I haven't done much, but I put some iptables rules on mine as a bare minimum.
#3
(11-24-2020, 06:59 PM)NobodyNew1 Wrote: I'd love to know what people are doing as far as security tweaks for the pinephone. Not that I need anything like CalyxOS or Graphene type of phone, but I'd like to put a little VPN on it as it can only be used for a pocket linux. I don't have the skill set to really work on the phone like others, but maybe one day I will.


You could take a look at Firejail, application sandboxing (in case of vulnerability prevents access outside program need).
On Mobian I have Firetools, Firejail configuration Wizard and it loads for easy configuration of programs you want to safely sandbox.

I use ssh to make Pinephone administration/commandline tasks from the computer quick/convenient. To make it more secure/inaccessible to outsiders I made my Pinephone ssh server Tor hidden service .onion access only https://forum.pine64.org/showthread.php?tid=11925
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki


[ Pinephone Original | Pinetab v1 / v2 Enjoyer ]


Linux Device Privacy / Security Playlist



#4
The Mobian wiki has a security page that covers most of the above and more. No mention of Wireguard on there yet - I suppose I should try it and see if it works.
https://wiki.mobian-project.org/doku.php?id=security
#5
@wibble Wireguard works perfectly out of the box. You can enable a systemd service using configuration files.
#6
The most important thing to me is to have full disk encryption. As of today IIRC only PostmarketOS includes it out of the box and Mobian using some scripting as well.
My two cents.

Enviado desde mi ONEPLUS A5010 mediante Tapatalk
#7
(11-26-2020, 02:19 PM)RTP Wrote:
(11-24-2020, 06:59 PM)NobodyNew1 Wrote: I'd love to know what people are doing as far as security tweaks for the pinephone. Not that I need anything like CalyxOS or Graphene type of phone, but I'd like to put a little VPN on it as it can only be used for a pocket linux. I don't have the skill set to really work on the phone like others, but maybe one day I will.


You could take a look at Firejail, application sandboxing (in case of vulnerability prevents access outside program need).
On Mobian I have Firetools, Firejail configuration Wizard and it loads for easy configuration of programs you want to safely sandbox.

I use ssh to make Pinephone administration/commandline tasks from the computer quick/convenient. To make it more secure/inaccessible to outsiders I made my Pinephone ssh server Tor hidden service .onion access only https://forum.pine64.org/showthread.php?tid=11925
That's amazing !! I'll look into all of that.
#8
Another good thing to do is set your ssh port to something nonstandard and only permit key-based logins. In /etc/ssh/sshd_config:

Code:
Port 12345
PasswordAuthentication no
PubkeyAuthentication yes


Possibly Related Threads…
Thread Author Replies Views Last Post
  PinePhone - boot from microSD laserpyramid 5 299 03-06-2024, 06:37 PM
Last Post: aular
  Are you using the Pinephone as your daily driver? jro 157 105,079 02-18-2024, 11:33 PM
Last Post: aular
  2020 PinePhone Manjaro CE EU for sale, name your price astrojuanlu 7 1,523 02-14-2024, 04:51 PM
Last Post: astrojuanlu
  pinephone is not bootble for the box. ijij 1 459 01-19-2024, 01:29 PM
Last Post: fxc
  Multiple issues with the Pinephone MTXP 12 1,937 12-28-2023, 07:55 AM
Last Post: MTXP
  pinephone repair shop shengchieh 0 381 12-26-2023, 02:42 PM
Last Post: shengchieh
  sudo nano file saving pinephone beta edition CharlesGnarley 4 1,478 12-22-2023, 03:44 PM
Last Post: Kevin Kofler
  Can't get Mobian on PinePhone to recognise USB-C docking bar duncan_bayne 9 6,600 12-04-2023, 02:14 AM
Last Post: Peter Gamma
  Pinephone not booting, always vibrating alexander12 7 4,665 11-22-2023, 06:46 PM
Last Post: Scary Guy
  Pinephone on Verizon chachi 3 991 10-09-2023, 11:26 AM
Last Post: alaraajavamma

Forum Jump:


Users browsing this thread: 1 Guest(s)