GrapheneOS / linux-hardenedLinks
Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Currently maintained at https://github.com/anthraxx/linux-hardened.
☆421Updated 2 years ago
Alternatives and similar repositories for linux-hardened
Users that are interested in linux-hardened are comparing it to the libraries listed below
Sorting:
- Unofficial forward ports of the last publicly available grsecurity patch☆151Updated 6 years ago
- Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than m…☆616Updated last week
- PKGBUILDs to build SELinux enabled packages for Arch Linux☆159Updated 2 weeks ago
- Qubes component: antievilmaid☆150Updated 9 months ago
- HardenedBSD implements strong exploit mitigations and security hardening technologies on top of FreeBSD, with a direct focus on the nexus…☆387Updated this week
- Qubes Security Pack☆504Updated 2 weeks ago
- A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations…☆1,470Updated 2 weeks ago
- Qubes component: core-admin☆133Updated this week
- DEPRECATED TPM enabled GRUB2 Bootloader☆194Updated 3 years ago
- Encrypted boot partition manager with UEFI Secure Boot support☆204Updated last year
- USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as …☆1,217Updated last month
- Qubes documentation☆363Updated this week
- HardenedBSD stable repo. Installer images built from this repo: http://installer.hardenedbsd.org/☆132Updated 4 years ago
- Scripts to slightly improve the security of the Linux boot process with UEFI Secure Boot and TPM support☆278Updated 2 years ago
- Qubes Builder☆86Updated 6 months ago
- The Qubes OS Project issue tracker☆568Updated last month
- My tool for working with Intel Management Engine - RETIRED REPO (see coreboot for new upstream)☆157Updated 6 years ago
- Documentation for the Heads firmware project☆89Updated this week
- A utility like pkg-audit for Arch Linux. Based on Arch Security Team data.☆330Updated 10 months ago
- deprecated - maybe replaced by: `apparmor.d`☆85Updated last year
- Intel ME 11.x Firmware Images Unpacker☆623Updated 6 years ago
- Nitrokey's Application (Win, Linux, Mac)☆289Updated 2 years ago
- Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separati…☆538Updated this week
- SELinux policy with Arch Linux specific changes. Based on the refrence policy☆30Updated 4 months ago
- Cryptsetup backup upstream repository https://gitlab.com/cryptsetup/cryptsetup☆157Updated this week
- Qubes OS Cheat Sheet - Contains commands for DomU and Dom0 in combination with some examples☆112Updated 6 years ago
- Linux Kernel Runtime Guard☆454Updated this week
- A Mirage firewall VM for QubesOS☆220Updated 2 months ago
- [No more new test patches, repo will remain as archive] Unofficial grsecurity test patch archive.☆51Updated 8 years ago
- Linux kernel source tree☆120Updated 3 years ago