diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-06-19 18:58:13 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-06-19 18:59:34 -0400 |
| commit | 441c18784b129d9f40deaeafb8cb985f6f641a55 (patch) | |
| tree | ca2873f2038afa876525f13c27e5e7bf0fddb230 | |
| parent | 0e28e2b725f8ef36257962fd95c2bc47019a5709 (diff) | |
clarify USB security changes
| -rw-r--r-- | static/releases.html | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/static/releases.html b/static/releases.html index 40e19b41..57ff1c58 100644 --- a/static/releases.html +++ b/static/releases.html @@ -782,10 +782,10 @@ <p>Changes since the 2024061400 release:</p> <ul> - <li>hide USB peripheral security setting when USB-C port setting is available</li> - <li>extend USB-C port setting to pogo pins (for Pixel Tablet)</li> + <li>remove our USB peripheral security setting on devices supporting our much better USB-C port mode (Pixel 6 and later)</li> + <li>extend USB-C port setting to also handle pogo pins on the Pixel Tablet</li> <li>kernel (5.10, 5.15, 6.1, 6.6): replace our deny_new_usb feature with a new deny_new_usb2 feature also disabling USB gadgets</li> - <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense beyond low-level hardware disabling of new USB connections and then USB data</li> + <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense disablingf new USB connections and then USB data at a hardware level, in case the USB controller is compromised or doesn't work correctly</li> <li>require user authentication for changing auto-reboot, USB peripheral and USB-C port security settings</li> <li>temporarily add back memory tagging exception for Pixel wifi_ext service</li> <li>add GrapheneOS Linux kernel port to the 6.6 GKI LTS branch</li> |