From 0c3aa1ade3c5bdefac74cf929bcc737211cbcff6 Mon Sep 17 00:00:00 2001 From: qoijjj <129108030+qoijjj@users.noreply.github.com> Date: Sun, 10 Dec 2023 00:48:53 -0800 Subject: [PATCH] Add more hardening details to the readme --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a655464..933884c 100644 --- a/README.md +++ b/README.md @@ -35,7 +35,7 @@ Hardening applied: - Disabling unprivileged user namespaces - Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces - Sets numerous hardening kernel parameters (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) -- Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally +- Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally, including for flatpaks - Installing Chromium into the base image ([Why chromium?](https://grapheneos.org/usage#web-browsing)) ([Why not flatpak chromium?](https://forum.vivaldi.net/post/669805)) - Including a hardened chromium config and pushing upstream fedora to harden the build for all fedora users, including secureblue users ([for example, enabling CFI](https://bugzilla.redhat.com/show_bug.cgi?id=2252874))