From f0677b794d35d2c2d4032cd00dc122d346e59c9d Mon Sep 17 00:00:00 2001
From: qoijjj <129108030+qoijjj@users.noreply.github.com>
Date: Tue, 28 Nov 2023 19:39:58 -0800
Subject: [PATCH] Reflect recent changes in the readme

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 43c27e6..8d3165a 100644
--- a/README.md
+++ b/README.md
@@ -30,7 +30,8 @@ Hardening applied:
 - Disable passwordless sudo for rpm-ostree
 - Setting more restrictive file permissions (Based on recommendations from [lynis](https://cisofy.com/lynis/))
 - Installing dnf-automatic and chkrootkit
-- Disabling unprivileged user namespaces and removing flatpak
+- Disabling unprivileged user namespaces
+- Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces
 - Sets numerous hardening kernel parameters (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html))
 - Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally
 - Installing Chromium from the koji updates-testing repo to always have the latest version of chromium, the stable chromium package lags behind on security patches ([Why chromium?](https://grapheneos.org/usage#web-browsing))