From 85a71f067a06fcfcc059fcacd5f63af4c4cc62fe Mon Sep 17 00:00:00 2001 From: Tommy Date: Mon, 27 Dec 2021 21:17:06 -0500 Subject: [PATCH] more info --- collections/_evergreen/linux-desktop.html | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/collections/_evergreen/linux-desktop.html b/collections/_evergreen/linux-desktop.html index 5edce888b7..c62b776dd2 100644 --- a/collections/_evergreen/linux-desktop.html +++ b/collections/_evergreen/linux-desktop.html @@ -170,6 +170,14 @@
Linux-Hardened
Hardened memory allocator

The hardened memory allocator from GrapheneOS can be used on Linux distributions. It is available by default on Whonix and is available as an AUR package on Arch based distributions. If you are using the AUR package, consider setting up LD_PRELOAD as described in the Arch Wiki.

+
Umask
+

Consider changing the default UMASK for both regular users and root to 077.

+ +
Mountpoint hardening
+Consider adding nodev, noexec, nosuid to mountpoints which do not need them. Typically, these could be applied to /boot, /boot/efi, /home, /root, /var. +If you use Toolbox, /var/log/journal must not have any of those options. +If you are on Arch Linux, do not apply noexec to /var/tmp. +
USBGuard

Consider following the Arch Wiki to set up USBGuard.