hardened malloc, working firewall.

config/settings/services/mem-alloc.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=build and install memory hardened allocator
+DefaultDependencies=no
+After=sysinit.target local-fs.target
+Before=basic.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/mem_alloc.sh
+RemainAfterExit=yes
+
+[Install]
+WantedBy=basic.target

config/settings/services/mem_alloc.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -e
+set -x
+if [ -f  '/usr/src/hardened_malloc/Makefile' ]; then
+   cd /usr/src/hardened_malloc/
+   make -s VARIANT=default CONFIG_NATIVE=false
+fi
+if [ -f  '/usr/src/hardened_malloc/out/libhardened_malloc.so' ]; then
+   echo '/usr/src/hardened_malloc/out/libhardened_malloc.so' | tee /etc/ld.so.preload
+fi
+