From 7beb19b64a33cb86771488ab558756fa86b577d3 Mon Sep 17 00:00:00 2001
From: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat, 1 Nov 2025 22:06:44 -0500
Subject: [PATCH] Update README.md with info about flatpak auth hardening

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index ee8d364..302c8ab 100644
--- a/README.md
+++ b/README.md
@@ -736,6 +736,10 @@ See:
   `/etc/ssh/ssh_config.d/30_security-misc.conf`
 - Hardens SSH server
   `/etc/ssh/sshd_config.d/30_security-misc.conf`
+- Configures flatpak to require authentication for all software installation
+  and management tasks including updates. Ships
+  `/usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy.security-misc`,
+  diverts/hides `/usr/share/polkit-1/rules.d/org.freedesktop.Flatpak.rules`.
 
 ### Project scope of application-specific hardening