update info on attack surface reduction

This commit is contained in:
Daniel Micay 2024-06-19 13:12:52 -04:00
parent 4d5c7ef2a1
commit adc450a182

View File

@ -241,10 +241,10 @@
<ul>
<li>Greatly reduced remote, local and proximity-based attack surface by
stripping out unnecessary code, making more features optional and disabling
optional features by default (NFC, Bluetooth, UWB, etc.), when the screen is
locked (connecting new USB peripherals, camera access) and optionally after a
timeout (Bluetooth, Wi-Fi).</li>
stripping out unnecessary code, making more features optional and
disabling optional features by default (NFC, Bluetooth, UWB, etc.), when
the screen is locked (USB, USB-C, pogo pins, camera access) and optionally
after a timeout (Bluetooth, Wi-Fi).</li>
<li>Native debugging (ptrace) access is blocked for all bundled apps to
reduce local attack surface. ptrace access is allowed by default for user
installed apps for compatibility, with an option to block it by default. In