• 6 Posts
  • 40 Comments
Joined 3 years ago
cake
Cake day: July 12th, 2023

help-circle

  • Looks like they put in a ton of effort to make this compatible with generic devices, but I have to ask, with all the features removed, why choose this over any other ROM?

    Features removed

    hardened_malloc — causes boot loops on devices with 39-bit virtual address space. replaced with AOSP Scudo.

    Auditor — requires hardware attestation which > doesn’t work on GSI

    mtectrl / misctrl — Pixel-specific memory tagging control; breaks vendor TEE drivers

    USB protection — the low-level USB port controls rely on Pixel-specific hardware and are non-functional on other devices

    native debugging protection — not ported; breaks compatibility with root solutions and vendor debugging tools

    Features disabled by default

    These can be re-enabled in TrebleApp → Hardening or Settings → Exploit protection.

    MTE/TBI for vendor processes — memory tagging breaks some vendor drivers

    hardened thread stacks — non-standard memory layout breaks some vendor drivers

    secure (exec-based) app spawning — breaks root solutions (Magisk / KernelSU)














  • FreeIPA and Keycloak will give you directory management (LDAP and Kerberos), identity management, and single-sign on (OIDC and SAML) which if all your computers are running Linux as well, will give you centralized management of users.

    You can then set other FOSS business management/productivity applications like NextCloud, Oodoo, Seafile, OnlyOffice, LibreOffice, CryptPad, etc. To use Keycloak as its authentication mechanism.

    A lot of this will depend on what kind of work the business does.

    You’ll also want to look into log management and SEIM for security monitoring, Wazuh, Graylog, and others. This is especially true if the business has any data compliancy responsibilities in the country this is in.







  • How about instead of restricting use of the software, adding in a clause that states "Use of this software is a formal acknowledgement and agreement by the user that race and gender are a social construct, gender identity and sexual orientation is a spectrum, humans can not be illegal,… " etc.

    Thus use of the software is not restricted and is still open source, but forces groups, organizations, and people who disagree with the above to acknowledge something counter to their system of power.