more features

This commit is contained in:
Daniel Micay 2020-12-05 11:45:05 -05:00
parent d3cbaad6d8
commit ffd301180f

View File

@ -65,6 +65,9 @@
substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
along with reducing the lifetime of sensitive data in memory</li>
<li>Hardened app runtime</li>
<li>Stronger app sandbox</li>
<li>Prevention of dynamic native code execution in-memory or via the filesystem
for the base OS without going via the package manager, etc.</li>
<li>Filesystem access hardening</li>
<li>Enhanced verified boot with better security properties and reduced attack surface</li>
<li>Enhanced hardware-based attestation with more precise version information</li>