more features

This commit is contained in:
Daniel Micay 2020-12-05 11:45:05 -05:00
parent d3cbaad6d8
commit ffd301180f

View File

@ -65,6 +65,9 @@
substantial defenses against the most common classes of vulnerabilities (heap memory corruption) substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
along with reducing the lifetime of sensitive data in memory</li> along with reducing the lifetime of sensitive data in memory</li>
<li>Hardened app runtime</li> <li>Hardened app runtime</li>
<li>Stronger app sandbox</li>
<li>Prevention of dynamic native code execution in-memory or via the filesystem
for the base OS without going via the package manager, etc.</li>
<li>Filesystem access hardening</li> <li>Filesystem access hardening</li>
<li>Enhanced verified boot with better security properties and reduced attack surface</li> <li>Enhanced verified boot with better security properties and reduced attack surface</li>
<li>Enhanced hardware-based attestation with more precise version information</li> <li>Enhanced hardware-based attestation with more precise version information</li>