diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-10-31 22:05:04 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-10-31 22:05:04 -0400 |
| commit | 28ac396b04d20fe509842be98b5e6fdf169854e8 (patch) | |
| tree | 2116461f130fb620906188d603788df3d8482aaa | |
| parent | deb0ae0288ac0aef357d5f7f770e88b5ac516456 (diff) | |
clarify that cachestat is already blocked for apps
| -rw-r--r-- | static/releases.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/static/releases.html b/static/releases.html index 9e66d73b..efb46683 100644 --- a/static/releases.html +++ b/static/releases.html @@ -565,7 +565,7 @@ <li>enable stamp configuration for microdroid kernel builds to set LOCALVERSION based on version control information as expected</li> <li>kernel (6.6): disable unused hibernation support</li> <li>kernel (6.6): disable unused TIOCSTI ioctl (already blocked via standard Android SELinux ioctl filtering)</li> - <li>kernel (6.6): disable unused cachestat system call</li> + <li>kernel (6.6): disable unused cachestat system call (already blocked for apps via standard Android seccomp-bpf policy)</li> <li>kernel (6.6): enable random kmalloc caches for x86_64 and microdroid too, not only bare metal arm64</li> <li>kernel (6.6): enable full struct randomization for x86_64 and microdroid too, not only bare metal arm64</li> <li>kernel (6.6): enable DEBUG_SG for microdroid too, not only bare metal</li> |