diff --git a/README.md b/README.md index 43c27e6..8d3165a 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,8 @@ Hardening applied: - Disable passwordless sudo for rpm-ostree - Setting more restrictive file permissions (Based on recommendations from [lynis](https://cisofy.com/lynis/)) - Installing dnf-automatic and chkrootkit -- Disabling unprivileged user namespaces and removing flatpak +- Disabling unprivileged user namespaces +- Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces - Sets numerous hardening kernel parameters (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) - Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally - Installing Chromium from the koji updates-testing repo to always have the latest version of chromium, the stable chromium package lags behind on security patches ([Why chromium?](https://grapheneos.org/usage#web-browsing))