diff --git a/README.md b/README.md index abefb53..6bcd93e 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,7 @@ Hardening applied: - Installing chkrootkit - Disabling unprivileged user namespaces - Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces +- Enabling only the [flathub-verified](https://flathub.org/apps/collection/verified/1) remote by default - Sets numerous hardening kernel parameters (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) - Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally, including for flatpaks - Installing Chromium into the base image ([Why chromium?](https://grapheneos.org/usage#web-browsing)) ([Why not flatpak chromium?](https://forum.vivaldi.net/post/669805))