You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Policy Harden<strong>in</strong>g• Forced <strong>in</strong>it to transition doma<strong>in</strong>s on exec.– Separate doma<strong>in</strong>s added for helper programs <strong>and</strong> allservices, even oneshot services.• Locked down block device access.– Protect<strong>in</strong>g critical partitions from direct access.– Limit<strong>in</strong>g each doma<strong>in</strong> to only needed partitions.• Removed unconf<strong>in</strong>ed doma<strong>in</strong>.– Even <strong>in</strong>it <strong>and</strong> kernel no longer use it.• Many more neverallows.19
Change language