secureblue / hardened-chromium

A hardened chromium for desktop Linux inspired by Vanadium.
GNU General Public License v2.0
17 stars 4 forks source link

secureblue features not covered by vanadium patches, patches needed #3

Closed qoijjj closed 1 month ago

qoijjj commented 1 month ago

the defaults should be changed in code for each of these

qoijjj commented 1 month ago

--ozone-platform=wayland

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago

--disk-cache-dir=/dev/null

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago

--extension-content-verification=enforce_strict --extensions-install-verification=enforce_strict

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago
"BackgroundModeEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-background-mode-by-default.patch

qoijjj commented 1 month ago
"ChromeVariations": 1,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/set-critical-variations-only.patch

qoijjj commented 1 month ago
"ClickToCallEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-shared-clipboard-and-click-to-call-by-default.patch

qoijjj commented 1 month ago
"DnsOverHttpsMode": "automatic",

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago
"MetricsReportingEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago
"PromotionalTabsEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-promotions-by-default.patch

qoijjj commented 1 month ago
"SearchSuggestEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-search-suggest-by-default.patch

qoijjj commented 1 month ago
"SharedClipboardEnabled": false,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-shared-clipboard-and-click-to-call-by-default.patch

qoijjj commented 1 month ago
"ShowFullUrlsInAddressBar": true,

done https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/show-full-urls-by-default.patch

qoijjj commented 1 month ago
"RemoteAccessHostAllowRemoteAccessConnections": false,
"RemoteAccessHostFirewallTraversal": false,

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-remote-access-by-default.patch

qoijjj commented 1 month ago
"BlockExternalExtensions": true,

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago
"AuthSchemes": "ntlm,negotiate",

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/restrict-default-supported-http-auth-schemes.patch

qoijjj commented 1 month ago
"CloudPrintProxyEnabled": false,

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-cloud-print-shared-clipboard-and-click-to-call-by-default.patch

qoijjj commented 1 month ago
"AutofillAddressEnabled": false,

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-autofill-by-default.patch

qoijjj commented 1 month ago
"AutofillCreditCardEnabled": false,

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/disable-autofill-by-default.patch

qoijjj commented 1 month ago
"AlwaysOpenPdfExternally": true,

https://github.com/qoijjj/chromium-copr-experimental/blob/master/patches/set-default-always-open-pdf-externally.patch

qoijjj commented 1 month ago
"AudioSandboxEnabled": true,

done https://github.com/qoijjj/chromium-copr-experimental/commit/b03c988d33ac328a88b5fb606ad5834aa2fede7f?diff=unified&w=0

qoijjj commented 1 month ago

network service: https://github.com/secureblue/hardened-chromium/commit/3c6e77ab52b09afbcb1074ceb3f8e70efb334503

sync: https://github.com/secureblue/hardened-chromium/commit/50d6ab90f4fe2361748b9cfbf0e4eed597877dca