Amutable Foundations: A Technical Overview
Lennart Poettering, Michael Vogt, and Joaquim Rocha have put together a detailed overview of what the Amutable Operating System (AOS) and associated infrastructure will look like. The image-based OS approach enables us to enforce some very strict but powerful security properties, which elevate the security posture of the system substantially above traditional Linux systems. Specifically, let's…
Lennart Poettering, Michael Vogt, and Joaquim Rocha have authored a comprehensive overview of the Amutable Operating System (AOS) and its accompanying infrastructure. This image-based operating system approach enables the implementation of stringent security measures that significantly enhance the system's security compared to conventional Linux operating systems.
Key security features of AOS include:
1. Absence of a UNIX shell and SSH access: By default, AOS does not install a UNIX shell or enable remote access via Secure Shell (SSH) on its nodes. This omission eliminates a significant attack surface, as these components are often exploited by malicious actors.
2. Absence of language interpreters: AOS also defaults to not installing common language interpreters such as Python and Perl. This is advantageous, as these interpreters can be a vector for executing malicious code.
3. Signed images only: On AOS, only images that have Verity data signed by a key present in the Verity keyring may be activated. This stringent requirement ensures that only verified and trusted software components can be executed within the system.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.