Security

Security is the foundation of NubiferOS, not an afterthought. We publish our threat model so you can verify our claims.

Security Layers

NubiferOS implements defense in depth with eight security layers:

┌─────────────────────────────────────────────────────┐
│  Application Sandboxing (Firejail)                 │
├─────────────────────────────────────────────────────┤
│  Credential Encryption (GPG/pass)                  │
├─────────────────────────────────────────────────────┤
│  Desktop Isolation (Wayland)                       │
├─────────────────────────────────────────────────────┤
│  Mandatory Access Control (AppArmor)               │
├─────────────────────────────────────────────────────┤
│  Kernel Hardening & Firewall                       │
├─────────────────────────────────────────────────────┤
│  CPU Security Mitigations                          │
├─────────────────────────────────────────────────────┤
│  Full Disk Encryption (LUKS)                       │
└─────────────────────────────────────────────────────┘

Documentation

• Threat Model - What we protect against and explicit boundaries
• Credential Security - How credentials are encrypted and managed
• Workspace Isolation - Firejail namespaces and read-only mode

Quick Summary

What We Protect Against

✅ Credential theft from disk ✅ Cross-account credential access ✅ Accidental destructive operations ✅ Keylogging between applications ✅ Supply chain attacks

What We Partially Mitigate

⚠️ CPU side-channel attacks (kernel mitigations enabled) ⚠️ Cold boot attacks (LUKS encryption, kernel hardening) ⚠️ Application-level exploits (sandboxing limits blast radius) ⚠️ Network-based attacks (firewall, fail2ban)

What We Don't Protect Against

⚡ Hardware keyloggers and DMA attacks ⚡ Nation-state actors ⚡ Firmware and UEFI attacks ⚡ Social engineering ⚡ Compromised cloud providers

Security Tools

We use battle-tested, audited tools rather than custom solutions:

Source Code

• Security Documentation
• SECURITY_SUMMARY.md
• THREAT_MODEL.md