[OpenSource Ghost]

Some systems isolate system apps and processes from each other using sandboxes and containers for security purposes. Does DD-WRT do any of that? Does it use any kind of hardened memory allocator? CPU security mitigations? I keep thinking about GrapheneOS and whether it is possible to apply the same security hardening aspects to DD-WRT firmware. There is this nice guide here - https://madaidans-insecurities.github.io/guides/linux-hardening.html . SysCTL tweaks are easy to apply, but starting with section 2.3 (Boot Parameters) it becomes complicated, especially the parts about compiling. I'd like to know whether DD-WRT firmware supports the kind of hardening (other than simple SysCTL tweaks) mentioned in that guide.

[Alozaros]

DDWRT is a single user system, what is the porpoise of the server or computer hardening ?
What sandbox are you talking about??
DDWRT is read only OS that contains a number of binaries and services that from their side can be vulnerable...there is no cubic isolation like or something else like...if someone takes over your router it will me very likely a very bad situation...and in my all experience with DDWRT when it happens is very likely set up error or drastic mistake user side...

[mwchang]