Brace toolkit

@simony
no, only the whole thing like:

sudo dnf install https://divested.dev/rpm/fedora/divested-release-20240607-1.noarch.rpm
sudo dnf install brace
#the next steps are optional but recommended
sudo brace-enable-rpmfusion #if you want foss but patent encumbered codecs
sudo dnf swap mesa-va-drivers mesa-va-drivers-freeworld --allowerasing #to fix hardware video acceleration
sudo brace-installer #to install recommended programs
sudo brace-supplemental-changes #for additional global changes
brace-supplemental-changes #for additional user changes
sudo dnf install firejail hardened_malloc && sudo firecfg #for extra security
sudo brace-enable-fapolicyd #to enable application allowlisting and binary verification

note adding the repo automatically pulls in real-ucode
the list of packages divested-release can provide is also hardcoded to prevent any other replacements

you can then run brace-audit to verify it is running

5 Likes