diff --git a/README.md b/README.md
index 4e2a7fa..f7ffc02 100644
--- a/README.md
+++ b/README.md
@@ -11,21 +11,20 @@ This is my fork of [easy-arch](https://github.com/classy-giraffe/easy-arch), a *
 7. `chmod u+x ./install.sh && ./install.sh`
 
 ### Changes to the original project
-1. /boot is now encrypted
-2. Added option to select your own kernel flavor
-3. Enabled AppArmor
-4. Removed swap partition (I will add zram auto config later)
-5. Replaced Snapper with Timeshift (snapper rollback only works nicely with openSUSE's layout and openSUSE's GRUB. Since the current layout works better with Timeshift and we don't have any GRUB package with SUSE's patches on the AUR, I opt in for Timeshift instead.
-6. The entire /var, not /var/log is in its own subvolume. There are more things that should not be included and restore with the main system, such as docker containers and virtual machines.
-7. No @snapshot subvolume, since we are setting this up to use with Timeshift.
-8. Added microcode installation
+1. Enabled AppArmor
+2. Removed swap partition (I will add zram auto config later)
+3. Replaced Snapper with Timeshift (snapper rollback only works nicely with openSUSE's layout and openSUSE's GRUB. Since the current layout works better with Timeshift and we don't have any GRUB package with SUSE's patches on the AUR, I opt in for Timeshift instead.
+4. The entire /var, not /var/log is in its own subvolume. There are more things that should not be included and restore with the main system, such as docker containers and virtual machines.
+5. No @snapshot subvolume, since we are setting this up to use with Timeshift.
+6. Default umask to 077
+7. Firewalld is enabled by default
 
 ### Partitions layout 
 
 | Partition Number | Label     | Size              | Mountpoint | Filesystem             |
 |------------------|-----------|-------------------|------------|------------------------|
 | 1                | ESP       | 512 MiB           | /boot/efi  | FAT32                  |
-| 2                | Cryptroot | Rest of the disk  | /          | Encrypted BTRFS (LUKS1)|
+| 2                | cryptroot | Rest of the disk  | /          | Encrypted BTRFS (LUKS1)|
 
 The **partitions layout** is pretty straightforward, it's inspired by [this section](https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Btrfs_subvolumes_with_swap) of the Arch Wiki. As you can see there's just a couple of partitions:
 1. A **FAT32**, 512MiB sized, mounted at `/boot` for the ESP.
@@ -41,7 +40,7 @@ The **partitions layout** is pretty straightforward, it's inspired by [this sect
 | 3                | @home          | /home            |
 | 4                | @var           | /var             |
 
-The **BTRFS subvolumes layout** follows the traditional and suggested layout used by **Snapper**, you can find it [here](https://wiki.archlinux.org/index.php/Snapper#Suggested_filesystem_layout). I only added a swap subvolume in case you need a swapfile, but it's totally optional. You'll be asked if you want it or not during the script execution. Here's a brief explanation of the **BTRFS layout** I chose:
+The **BTRFS subvolumes layout** follows the traditional and suggested layout used by **Snapper**, you can find it [here](https://wiki.archlinux.org/index.php/Snapper#Suggested_filesystem_layout). Here's a brief explanation of the **BTRFS layout** I chose:
 1. `@` mounted as `/`.
 2. `@boot` mounted as `/boot`.
 3. `@home` mounted as `/home`.