ptr1337

Source material:
  http://security.stackexchange.com/questions/24444/what-is-the-most-hardened-set-of-options-for-gcc-compiling-c-c
  https://wiki.gentoo.org/wiki/Hardened_Gentoo
  https://wiki.debian.org/Hardening

================================================================================================================>
GCC Security related flags and options:

CFLAGS="-fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2" 
LDFLAGS="-Wl,-z,now -Wl,-z,relro"

ptr1337

From 841d090cab781709c26974af8309ac309ec32875 Mon Sep 17 00:00:00 2001
From: mssx86 <mss@tutanota.de>
Date: Thu, 13 May 2021 21:43:18 +0300
Subject: [PATCH] andikleen lto-5.12-3 3fb2a4dd for 5.12.3.

---
 Documentation/bpf/btf.rst                    |  4 ++
 Documentation/kbuild/lto-build.rst           | 70 ++++++++++++++++++++
 Kbuild                                       |  3 +
 Makefile                                     |  9 ++-

ptr1337

Keybase proof

I hereby claim:

• I am ptr1337 on github.
• I am ptr1337 (https://keybase.io/ptr1337) on keybase.
• I have a public key ASBEkxoDuzhqRhxOlVRTVMQsgQ1QV0WmRlfksVy0ttD_Lwo

To claim this, I am signing this object:

ptr1337

What's Cool

• Encrypted root partition
  • AES-256 bit cipher
  • Argon2id variant for PBKDF
  • Sha3-512 bit hash
• rEFInd bootloader
  • With dreary theme
  • Optimal Settings (optimized for aesthetics, and boot time)
• Boot into backups thanks to refind-btrfs

ptr1337

WARNING from TellyO3 WORK IN PROGRESS

I am a novice Linux user, please take all my edits with a grain of salt. I wanted it to work a bit better for a number of reasons. The original guide was written early 2021, it is February 2022 as of now. Some of the utilities, like the original custom kernel are deprecated. Additionally some AUR repos are not up to date, as is the case with auto-cpufreq which was last updated months ago. I also included some troubleshooting tips, based on issues I encountered. Feel free to leave any suggestions or tips, it would be greatly appreciated.

My goal is also to have a more template like setup, give you the utilities you need but not anything else. Especially the first setup had a lot of extra's which were absolutely not necessary and it took me a lot of time to disect some of that from what is actually used in the setup.

• No GDM, because I don't want its gnome dependencies if I don't use them
• Many packages were changed or made optional
• Xanmod-TT

ptr1337

From dff2851a0955d1bc1d0ea2cd4ae275240c33b464 Mon Sep 17 00:00:00 2001
From: Peter Jung <admin@ptr1337.dev>
Date: Thu, 16 Jun 2022 05:33:08 +0200
Subject: [PATCH] anbox

Signed-off-by: Peter Jung <admin@ptr1337.dev>
---
 drivers/android/Kconfig           |  6 +++---
 drivers/android/Makefile          | 10 +++++++---
 drivers/android/binder.c          | 17 ++++++++++++++---

ptr1337

# Maintainer: Peter Jung ptr1337 <admin@ptr1337.dev>
# Contributor: Piotr Gorski <lucjan.lucjanov@gmail.com>
# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
# Contributor: Tobias Powalowski <tpowa@archlinux.org>
# Contributor: Thomas Baechler <thomas@archlinux.org>

### Selecting the CPU scheduler
# ATTENTION - one of seven predefined values should be selected!
# 'bmq' - select 'BitMap Queue CPU scheduler'
# 'pds' - select 'Priority and Deadline based Skip list multiple queue CPU scheduler'

ptr1337

DKMS make.log for nvidia-535.54.03 for kernel 6.5.0-rc1-1-cachyos-rc (x86_64)
Mo 10. Jul 18:40:52 CEST 2023
make[1]: Entering directory '/usr/lib/modules/6.5.0-rc1-1-cachyos-rc/build'
warning: the compiler differs from the one used to build the kernel
  The kernel was built by: gcc (GCC) 13.1.1 20230525
  You are using:           cc (GCC) 13.1.1 20230525
  SYMLINK /var/lib/dkms/nvidia/535.54.03/build/nvidia/nv-kernel.o
  SYMLINK /var/lib/dkms/nvidia/535.54.03/build/nvidia-modeset/nv-modeset-kernel.o
 CONFTEST: hash__remap_4k_pfn
 CONFTEST: set_pages_uc