docs: add feature details

This commit is contained in:
qoijjj
2024-01-22 13:45:26 -08:00
committed by GitHub
parent 06f6aa788d
commit 7b0a34941b

View File

@@ -32,6 +32,7 @@ Hardening applied:
- Brute force protection by locking user accounts for 24 hours after 50 failed login attempts, hardened password encryption and password quality suggestions
- Installing chkrootkit
- Set opportunistic DNSSEC and DNSOverTLS for systemd-resolved
- Configure chronyd to use Network Time Security (NTS)
- (Non-userns variants) Disabling unprivileged user namespaces
- (Non-userns variants) Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces
- Enabling only the [flathub-verified](https://flathub.org/apps/collection/verified/1) remote by default