http://secure45nbquibuw6thmenrfamhobdkkrllgxrtayn4sgmnexremexyd.onion/linux-phones.html
PureOS changes a few security-relevant settings , but
these are also mostly negligible: PureOS does not apply the exec-shield patch so that sysctl doesn't even exist in the first place. The purpose of disabling kexec is to prevent root from booting a malicious kernel, but root can do so many other things to modify the kernel , such as loading a
kernel module.