Add Brace, a toolkit to enhance privacy/security on Linux

[anonymous261]

Check this box to affirm you have no conflict of interest.

on

Website

GitHub - divestedcg/Brace: Toolkit compatible with multiple Linux distros...

Short description

@SkewedZeppelin 's configuration toolkit that can increase security and allow one to quickly install certain apps

Why I think this tool should be added

On Fedora Atomic, Brace has some overlap with secureblue’s configurations. However, unlike secureblue, Brace isn’t limited to just Fedora Atomic. It seems to be available on every PG recommended distro.
(I’ve also been schooled on Brace multiple times so I can really see its usefulness )

Linux malware can avoid syscall-based endpoint protection

Both secureblue and my brace disable io_uring.

Security comparison - GNOME and KDE Plasma

just use brace as a whole: it does that and way more: GitHub - divestedcg/Brace: Toolkit compatible with multiple Linux distros that allows for installation of handpicked applications, along with corresponding configs that have been tuned for reasonable privacy and security. combine it with firejail, fapolicyd, real-ucode, and my hardened_malloc package (which now supports buffer overflow checks) running brace-audit gives you the steps to do this all

Section on Privacy Guides

Linux Overview

[KevPham (Kevin Pham)]

What applications does Brace install for you? I haven’t had a close look at the repo yet, but it seems like it installs a hardened version of Chromium?

I’d love any testimony from your experiences using it, if applicable.

[anonymous261]

I personally find that Brace’s applications are less important than the configurations. But Brace does help install stuff like Tor Browser without having to compile it from source or use the Tor Browser Installer, which is useful.