diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 11 |
1 files changed, 5 insertions, 6 deletions
@@ -60,12 +60,11 @@ The following notes are for myself so I can remember what hardening features to - Atomic updates with dm-verity - Wayland by default - Chimera userland (chimerautils/FreeBSD ported) -- pkgsrc (NetBSD) package manager - - build into tarball - - on first install and on each update extract the tarball into /home/USER/.local/pkgsrc for each user - - regen mk.conf on each update/install to use correct prefix - - per-user packages only ^_^ - - unprivileged bootstrap +- rpm/dnf package manager + - built-in support in yocto yayayayayay + - good OpenPGP signature management + - set the prefix/installroot to $HOME/.local/pkg/ + - set the database to $HOME/.local/pkg/var/db - Runit init system (minimal attack surface) - Might be changed to OpenRC - Secure Boot (TPM) - Decoy/duress PIN - PAM module, wipe all user-controlled partitions and reboot immediately |