Thoughts about Linux Kernel Hardening

Since PureOS focuses on security of the user i was wondering what do you think guys about these projects:

  • What do you think about Linux Kernel Runtime Guard (LKRG)?
  • security-misc, a package which tweaks all the Linux security settings (KSPP).

another course of action is to harden the running system by using all systemd features which enhance privacy and accountability. It’s like poor–man’s–SE–Linux so to speak. :wink: