mesalocklinux/mesalock-linux repository overview

⁠MesaLock Linux: A Memory-Safe Linux Distribution

MesaLock Linux is a general purpose Linux distribution which aims to provide a safe and secure user space environment. To eliminate high-severe vulnerabilities caused by memory corruption, the whole user space applications are rewritten in memory-safe programming languages like Rust and Go. This extremely reduces attack surfaces of an operating system exposed in the wild, leaving the remaining attack surfaces auditable and restricted. Therefore, MesaLock Linux can substantially improve the security of the Linux ecosystem. Additionally, thanks to the Linux kernel, MesaLock Linux supports a broad hardware environment, making it deployable in many places. Two main usage scenarios of MesaLock Linux are for containers and security-sensitive embedded devices. With the growth of the ecosystem, MesaLock Linux would also be adopted in the server environment in the future.

To get better functionality along with strong security guarantees, MesaLock Linux follows the following rules-of-thumb for hybrid memory-safe architecture designing proposed by the Rust SGX SDK project.

1. Unsafe components should be appropriately isolated and modularized, and the size should be small (or minimized).
2. Unsafe components should not weaken the safe, especially, public APIs and data structures.
3. Unsafe components should be clearly identified and easily upgraded.

⁠Quick Start

You can quickly experience MesaLock Linux in the container environment using Docker.

$ docker run -it mesalocklinux/mesalock-linux

⁠Tags

• latest: master branch
• develop: develop branch
• version (e.g., 0.1.0): Git tag

For more, please visit our website: http://mesalock-linux.org⁠