diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-12-05 11:48:55 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-12-05 11:48:55 -0500 |
| commit | 53957bef493251c2c491cb37e30706c8115380aa (patch) | |
| tree | 4d25516a8d6c872651ac85101adfb39ca6aa0ad2 /static/features.html | |
| parent | 0cfe95a9e1f5f31298b668bfeac58557811b2a54 (diff) | |
reorder a bit
Diffstat (limited to 'static/features.html')
| -rw-r--r-- | static/features.html | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/static/features.html b/static/features.html index 952c4c71..607cebc8 100644 --- a/static/features.html +++ b/static/features.html @@ -59,14 +59,14 @@ <p>Partial list of GrapheneOS features:</p> <ul> - <li>Hardened kernel</li> + <li>Hardened app runtime</li> + <li>Stronger app sandbox</li> <li>Hardened libc providing defenses against the most common classes of vulnerabilities (memory corruption)</li> <li>Hardened malloc (memory allocator) leveraging modern hardware capabilities to provide substantial defenses against the most common classes of vulnerabilities (heap memory corruption) along with reducing the lifetime of sensitive data in memory</li> - <li>Hardened app runtime</li> - <li>Stronger app sandbox</li> + <li>Hardened kernel</li> <li>Prevention of dynamic native code execution in-memory or via the filesystem for the base OS without going via the package manager, etc.</li> <li>Filesystem access hardening</li> |