reorder a bit
This commit is contained in:
parent
0cfe95a9e1
commit
53957bef49
@ -59,14 +59,14 @@
|
|||||||
<p>Partial list of GrapheneOS features:</p>
|
<p>Partial list of GrapheneOS features:</p>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>Hardened kernel</li>
|
<li>Hardened app runtime</li>
|
||||||
|
<li>Stronger app sandbox</li>
|
||||||
<li>Hardened libc providing defenses against the most common classes of vulnerabilities (memory
|
<li>Hardened libc providing defenses against the most common classes of vulnerabilities (memory
|
||||||
corruption)</li>
|
corruption)</li>
|
||||||
<li>Hardened malloc (memory allocator) leveraging modern hardware capabilities to provide
|
<li>Hardened malloc (memory allocator) leveraging modern hardware capabilities to provide
|
||||||
substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
|
substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
|
||||||
along with reducing the lifetime of sensitive data in memory</li>
|
along with reducing the lifetime of sensitive data in memory</li>
|
||||||
<li>Hardened app runtime</li>
|
<li>Hardened kernel</li>
|
||||||
<li>Stronger app sandbox</li>
|
|
||||||
<li>Prevention of dynamic native code execution in-memory or via the filesystem
|
<li>Prevention of dynamic native code execution in-memory or via the filesystem
|
||||||
for the base OS without going via the package manager, etc.</li>
|
for the base OS without going via the package manager, etc.</li>
|
||||||
<li>Filesystem access hardening</li>
|
<li>Filesystem access hardening</li>
|
||||||
|
Loading…
x
Reference in New Issue
Block a user