Post #2991566

@jannic@hachyderm.io @jann@infosec.exchange Yes, but turning this one is trickier in two ways: 1. Some of these features still require compiler hardening flags to work/wiring 2. It's sometimes harder to selectively enable, which can pose problems if programs suddenly stop working, especially 3rd party apps. Generally though yes, this would be a good approach. GrapheneOS makes use of such hardware features much more aggressively for example!