Secureblue - Atomic Fedora Hardening

one entirely remove Chromium from the image

To be clear, we don’t use Fedora’s chromium anymore, and haven’t for some time. We ship our own browser, Trivalent:

I’m looking if everything that was done to promote Chromium could be entire lift by the user to another Chromium based browser.

No, our hardening goes well beyond what you can do with config and policies. Not to mention the built-in adblocking using the same mechanism Vanadium does. Using a different chromium-based browser would likely be a security downgrade.

replace with another chromium based browser

It’s not possible to do so with local overrides, due to an upstream issue (related but not identical issue here)

Your options would be to either just install your browser of preference alongside Trivalent, or build your own custom image with bluebuild. That said, it would be rather strange to implement a security downgrade on what is arguably the widest source of attack surface for average desktop use case: the browser.

From a privacy point it may have some benefits to adopt Brave over Chromium.

Again, we’re not shipping chromium :slightly_smiling_face:

2 Likes