From e40b70df06a30c3a2d99f337f3cbfe3d5a54aa83 Mon Sep 17 00:00:00 2001 From: spaceoden <26421479+spaceoden@users.noreply.github.com> Date: Sat, 30 Nov 2024 08:31:04 +0000 Subject: [PATCH] docs: remove mention of legacy sudo tweak (#627) --- docs/README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/README.md b/docs/README.md index 978c35b..764d847 100644 --- a/docs/README.md +++ b/docs/README.md @@ -39,7 +39,6 @@ The following are not in scope: - Blacklisting numerous unused kernel modules to reduce attack surface [details](https://github.com/secureblue/secureblue/blob/live/files/system/etc/modprobe.d/blacklist.conf) - Enabling only the [flathub-verified](https://flathub.org/apps/collection/verified/1) remote by default - Sets numerous hardening kernel arguments (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) [details](KARGS.md) -- Reduce the sudo timeout to 1 minute - Require wheel user authentication via polkit for `rpm-ostree install` [why?](https://github.com/rohanssrao/silverblue-privesc) - Brute force protection by locking user accounts for 24 hours after 50 failed login attempts, hardened password encryption and password quality suggestions - Installing usbguard and providing `ujust` commands to automatically configure it