Offers a wide range of opinionated settings that prioritize privacy, security, and usability for a curated set of Linux programs.
|
|
||
|---|---|---|
| brace | ||
| unused | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| brace.install | ||
| brace.spec | ||
| LICENSE | ||
| permissions.facl | ||
| PKGBUILD | ||
| README.md | ||
| TODO | ||
brace
Overview
Brace offers a wide range of opinionated settings that prioritize privacy, security, and usability for a curated set of Linux programs.
Compatibility
- Fedora
Fallback Compatibility
- Below distros are untested and maintained only as a fallback if Fedora goes away
- Arch Linux
- openSUSE
- RHEL-like (CentOS, Rocky, Alma)
- Debian
License
AGPL-3.0-or-later where applicable
Prebuilts
- Fedora via Divested-RPM: https://divested.dev/index.php?page=software#divested-release
- Fedora via CI: https://gitlab.com/divested/brace/-/jobs/artifacts/master/browse?job=build_rpm
- Arch via CI: https://gitlab.com/divested/brace/-/jobs/artifacts/master/browse?job=build_arch
- Debian via CI: https://gitlab.com/divested/brace/-/jobs/artifacts/master/browse?job=build_deb
Building
- git clone [THIS REPO]
- RPM: rpmbuild -ba brace.spec
- Arch Linux: makepkg
- Debian: dpkg-deb --root-owner-group --build brace
Supported Configuration Targets
- Chromium, Chrome, Brave
- chrony
- Firefox, Firefox ESR, Thunderbird
- GNOME, MATE, Cinnamon
- GRUB
- Kernel
- NetworkManager
- polkit
- systemd
- TLP
- udev
Additional Inclusions
- brace-audit helper to verify settings are applied
- brace-enable-auto-updates helper to enable dnf automatic updates
- brace-enable-fapolicyd helper to enable fapolicyd for program allowlisting
- brace-enable-rpmfusion helper to enable rpmfusion-free repo for eg. codecs
- brace-installer helper with categories of packages to install
- brace-rpm-verify helper to verify integrity of installed packages
- brace-supplemental-changes helper to change additional global and per-user settings
- brace-update-system helper to update to next major version
- restic-backup@.* systemd units for daily backups
Known Issues
- A reboot is required on openSUSE after install for dconf changes to take effect.
- Compatibility is best with Fedora, and that is the primary test-bed.
- Restrictions on /sys/bus/scsi in 99-brace-sys.conf can break disc drive access by some programs.
Credits
- userjs-arkenfox.js
- @thorin-oakenpants + @earthlng + @claustromaniac
- MIT:
arkenfox/user.js@af51631597/LICENSE.txt - https://github.com/arkenfox/user.js
- 99-brace-proc.conf and 99-brace-sys.conf
- Topi Miettinen (@topimiettinen)
- GPL-2.0+:
hardening-runtime/-@1a31553672/debian/copyright hardening-runtime/-@1a31553672
- brace-rpm-verify
- firewalld IPv6 drop zone fix
- restic-backup.service
- chrony.brace.conf
- modprobe.d/brace.conf additional module blocking