diff --git a/README.md b/README.md index 33649ae..8330e0d 100644 --- a/README.md +++ b/README.md @@ -24,9 +24,9 @@ Available on [Quay](https://quay.io) as: * Super tiny (`glibc`-based is `~13.2MB` and `musl`-based is `~12.5MB`) * Built from source, including libraries -* Built `FROM scratch`, see the [Filesystem](#Filesystem) section below for an exhaustive list of the image's contents +* Built `FROM scratch`, see the [Filesystem](#filesystem) section below for an exhaustive list of the image's contents * Reduced attack surface (no `bash`, no UNIX tools, no package manager...) -* Built with exploit mitigations enabled (see [Security](#Security)) +* Built with exploit mitigations enabled (see [Security](#security)) ## Configuration @@ -58,7 +58,7 @@ This image attempts to build a secure NGINX container image. It does so by the following ways: - downloading and verifying the source code of NGINX and every library it is built with, -- packaging the image with only those files required during runtime (see [Filesystem](#Filesystem)), +- packaging the image with only those files required during runtime (see [Filesystem](#filesystem)), - by enforcing a series of exploit mitigations (PIE, full RELRO, full SSP, NX and Fortify) ### Verifying the presence of exploit mitigations