From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 6562F8907; Mon, 22 Jun 2026 09:56:33 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id AA783886C; Mon, 22 Jun 2026 09:56:30 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=0.4 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_MISSING,FROM_SUSPICIOUS_NTLD,SPF_HELO_NONE, T_PDS_OTHER_BAD_TLD autolearn=no autolearn_force=no version=4.0.1 Received: from mail-108-mta156.mxroute.com (mail-108-mta156.mxroute.com [136.175.108.156]) by atuin.qyliss.net (Postfix) with ESMTPS id 5FD4C8868 for ; Mon, 22 Jun 2026 09:56:29 +0000 (UTC) Received: from filter006.mxroute.com ([136.175.111.3] filter006.mxroute.com) (Authenticated sender: mN4UYu2MZsgR) by mail-108-mta156.mxroute.com (ZoneMTA) with ESMTPSA id 19eeec285ac00067f7.001 for (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384); Mon, 22 Jun 2026 09:56:26 +0000 X-Zone-Loop: c3a27a0c4f032259a39444fcd27c90b313d3ee1cd32e X-Originating-IP: [136.175.111.3] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gagarin.work; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=/G9gwVnXTQBvPQ4cqI8px5RqkEseMqji7SCUek7neTw=; b=q920jJBJJYrwyUe09A2fh5Dcst 8yABT7D6CafjTw9D3pI3/PwqtHmlNOKsBD4k7kBXZavGSLEUhEhPC3IvbiLsxNiN5fd6SnJl1rJO3 eqiwfx77CoEnGPij6LeaSgSkUYfOC6bcpwLZcSlaFr2C2JnrCS27dhfVCbD1ppJ2ndEFDq3uDW8kE NFbw2FWtjSodQrj2yDTGli2jHTFC8XScSBmLWOj/yuw3FYVac3x2CAjc5Qm07FLLcXTuaFtV1xpsE ctkxtYRwqTWJXpi3sdwGzTAkJ9PI5j/E1S16sDWrZsNrbgvwR00ssZ10pE7NxdpyK+x6WN1NJzWsB kaIkYV/g==; From: Valentin Gagarin To: devel@spectrum-os.org Subject: [PATCH v2 2/2] Documentation: sketch the threat model on the front page Date: Mon, 22 Jun 2026 11:55:56 +0200 Message-ID: <20260622095556.170159-2-valentin@gagarin.work> In-Reply-To: <20260622095556.170159-1-valentin@gagarin.work> References: <20260617132414.103828-1-valentin@gagarin.work> <20260622095556.170159-1-valentin@gagarin.work> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Authenticated-Id: valentin@gagarin.work Message-ID-Hash: RBP25DQWO5ZBGHQXBTV2F7H3GS74NHT6 X-Message-ID-Hash: RBP25DQWO5ZBGHQXBTV2F7H3GS74NHT6 X-MailFrom: valentin@gagarin.work X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Valentin Gagarin X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Also capture the poking-holes security model and hint at the trust boundary. This way of phrasing it intentionally doesn't go into any detail. Proper exposition in dedicated documents would still be fruitful, especially for readers less experienced with the domain. But this way we already mention all the most important ideas in the first few paragraphs, which should be more likely to capture attention of experts. Signed-off-by: Valentin Gagarin --- Documentation/index.html | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Documentation/index.html b/Documentation/index.html index 6d4f07b..e1c5ebb 100644 --- a/Documentation/index.html +++ b/Documentation/index.html @@ -21,9 +21,14 @@ the principle of security by compartmentalization. It aims to have a lower barrier to entry and to be easier to use and maintain than other such systems. +

+By isolating each application in a virtual machine, Spectrum prevents untrusted +software from accessing what you haven't explicitly allowed or disrupting other +applications. +

Persistent data will be managed centrally, while -applications remain isolated. This means that the system can still be +preserving boundaries between compartments. This means that the system can still be thought of as a whole, rather than many virtual machines each becoming a system of its own. -- 2.54.0