diff --git a/docs/README.md b/docs/README.md index 978c35b..764d847 100644 --- a/docs/README.md +++ b/docs/README.md @@ -39,7 +39,6 @@ The following are not in scope: - Blacklisting numerous unused kernel modules to reduce attack surface [details](https://github.com/secureblue/secureblue/blob/live/files/system/etc/modprobe.d/blacklist.conf) - Enabling only the [flathub-verified](https://flathub.org/apps/collection/verified/1) remote by default - Sets numerous hardening kernel arguments (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) [details](KARGS.md) -- Reduce the sudo timeout to 1 minute - Require wheel user authentication via polkit for `rpm-ostree install` [why?](https://github.com/rohanssrao/silverblue-privesc) - Brute force protection by locking user accounts for 24 hours after 50 failed login attempts, hardened password encryption and password quality suggestions - Installing usbguard and providing `ujust` commands to automatically configure it