1
0
mirror of https://github.com/PrivSec-dev/privsec.dev synced 2025-02-20 18:31:35 -05:00
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-16 12:18:46 -07:00
parent 058bf903cb
commit e83cf58c88
Signed by: Tomster
GPG Key ID: 555C902A34EC968F

View File

@ -385,7 +385,7 @@ linux&#8209;hardened disables unprivileged user namespaces (`kernel.unprivileged
The [hardened memory allocator (hardened_malloc)](https://github.com/GrapheneOS/hardened_malloc) from GrapheneOS can be used on general Linux distributions, though [only for some programs](https://www.kicksecure.com/wiki/Hardened_Malloc).
On Fedora and Red Hat Enterprise Linux, SecureBlue provides a [copr repository](https://copr.fedorainfracloud.org/coprs/secureblue/hardened_malloc/) with both `x86_64` and `aarch64` architecture support. Divested Computing Group has a [similar build](https://github.com/divestedcg/rpm-hardened_malloc) for Fedora build, but with only `x86_64` support. Using the SecureBlue's repository is preferable, the Divested repo is known to [block certain IP addresses](https://grapheneos.social/@Tommy/112274772803550392).
On Fedora and Red Hat Enterprise Linux, SecureBlue provides a [copr repository](https://copr.fedorainfracloud.org/coprs/secureblue/hardened_malloc/) with both `x86_64` and `aarch64` architecture support. Divested Computing Group has a [similar build](https://github.com/divestedcg/rpm-hardened_malloc) for Fedora, but with only `x86_64` support. Using the SecureBlue's repository is preferable, the Divested repo is known to [block certain IP addresses](https://grapheneos.social/@Tommy/112274772803550392).
On Arch-based systems, hardened_malloc is [available through the AUR](https://wiki.archlinux.org/title/Security#Hardened_malloc).