summaryrefslogtreecommitdiff
path: root/static
diff options
context:
space:
mode:
Diffstat (limited to 'static')
-rw-r--r--static/features.html3
1 files changed, 3 insertions, 0 deletions
diff --git a/static/features.html b/static/features.html
index e99a1bd3..1de146f0 100644
--- a/static/features.html
+++ b/static/features.html
@@ -65,6 +65,9 @@
substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
along with reducing the lifetime of sensitive data in memory</li>
<li>Hardened app runtime</li>
+ <li>Stronger app sandbox</li>
+ <li>Prevention of dynamic native code execution in-memory or via the filesystem
+ for the base OS without going via the package manager, etc.</li>
<li>Filesystem access hardening</li>
<li>Enhanced verified boot with better security properties and reduced attack surface</li>
<li>Enhanced hardware-based attestation with more precise version information</li>