From d4380972a91d8ff8cf80e7cb5df065210bb9c72c Mon Sep 17 00:00:00 2001
From: anthony <anthonytumia@proton.me>
Date: Tue, 14 Oct 2025 12:42:50 +0000
Subject: [PATCH] added coming soon line

---
 index.html | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/index.html b/index.html
index e8d247c..84c7131 100644
--- a/index.html
+++ b/index.html
@@ -106,7 +106,7 @@ pre.ascii-art {
 	<p><span class="prompt">➜</span> <span class="cmd">~/coming-soon</span></p>
 	<p>Welcome to <strong>Miasma OS</strong> - An immutable, security first, Arch based distribution. Designed to be secure by default but modern and user friendly.</p>
 	<p><strong>Overview:</strong></p>
-	<p>MiasmaOS aims at being a security hardened, immutable Linux distribution built on top of Arch Linux. Whilst this distribution takes inspiration from GrapheneOS, Secureblue, DivestOS, and many others hardened systems, the goal here is to make a hardened distribution that is also modern and easy to use without much configuration. It is an attempt to break the privacy/security paradox where the common belief is that if it is secure and private, it is not user friendly.
+	<p>MiasmaOS aims at being a security hardened, immutable Linux distribution built on top of Arch Linux. Whilst this distribution takes inspiration from GrapheneOS, Secureblue, DivestOS, and many others security focused systems, the goal here is to make a secure distribution that is also modern and easy to use without much configuration. It is an attempt to break the privacy/security paradox where the common belief is that if it is secure and private, it is not user friendly.
 	</p>
 	<p><strong>Security features</strong></p>
 	<ul>
@@ -115,16 +115,16 @@ pre.ascii-art {
 	<li> Flatpak app store for installing GUI applications</li>
 	<li> Immutable base, so root files cannot be tampered with</li>
 	<li> Firejail and Apparmor for additional containerization for non Flatpak applications</li>
-	<li> XWayland-Satellite for rather than XWayland for X11 apps (this uses a fake root so X11 can't break containment)</li>
-	<li> Cosmic desktop. Whilst I can acknowledge the Cosmic desktop is still in beta, it is written in Rust (memory safety) and does not contain the amount of unsafe X11 code that other desktop environments like Gnome and KDE Plasma have. Its both a logical choice and good futureproofing.</li>
+	<li> XWayland-Satellite for rather than XWayland. This offers more isolation and better compatibility for X11 appscompatibility for X11 apps.</li>
+	<li> Cosmic desktop. Whilst I can acknowledge the Cosmic desktop is still in beta, it is written in Rust (memory safety) and does not contain the amount of unsafe X11 code that other desktop environments like Gnome and KDE Plasma have. It's both a logical choice and good futureproofing.</li>
 	<li> Opendoas to replace sudo. This distro doesn't completely remove elevated privileges (by default) but it does replace sudo with doas. doas was ported from OpenBSD and has a smaller codebase so it has a smaller attack surface and is easier to maintain.</li>
-	<li> doas has also been limited. If you must run higher privilege commands that are out of scope for doas, please use run0. The distribution does attempt to treat you like an adult, and you can use elevated permissions, but this is made somewhat inconvenient purposely to discourage/minimize it.</li>
+	<li> doas has also been limited. If you must run higher privilege commands that are out of scope for doas, please use run0. Run0 removes set‑uid binaries, creates an isolated execution environment for commands, and uses Polkit to manage permissions. The distribution does attempt to treat you like an adult, and you can use elevated permissions, but this is made somewhat inconvenient purposely to discourage/minimize it.</li>
 	<li> Blacklisted module - copied from Secureblue</li>
 	<li> Brace scripts by DivestOS to add hardened policies to certain applications.</li>
 	<li> Boot and System Integrity:<br>
 	MiasmaOS boots through systemd‑boot with Secure Boot enabled on UEFI firmware. The boot chain is measured with the TPM 2.0, guaranteeing that every component—from the bootloader to the kernel and initramfs—is cryptographically verified before execution.</li>
 	<li> Btrfs root with a dedicated @snapshots subvolume for rollback.</li>
-	<li> Optional LUKS2 encryption (AES‑XTS, 512‑bit key) on install.</li>
+	<li> Optional LUKS2 encryption (AES‑XTS, 256‑bit key) on install.</li>
 	</ul>
 	<p><strong>Additional Features</strong></p>
 	<ul> <li>The default browser is a slightly modified version of Ungoogled-Chromium. Ungoogled-Chromium needs certain flags switched on for full Wayland support, and since avoiding anything X11 is a top priority of this distribution, that needs to be on by default. Additionally the Chromium-Web-Store extension by NeverDecaf comes preinstalled, so users can access their favorite browser extensions. Note that browser extensions can be a big security risk and by default, only a handful of extensions are approved in the modified Brace policy (located at /etc/chromium/policies).