diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-02-04 00:20:33 -0500 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-02-04 00:20:33 -0500 |
| commit | 8508523ab359e105d94ab964d4b7b04e4ef6d80b (patch) | |
| tree | ca82313e962bee5b883df655169016486ced83a5 | |
| parent | 83420b2b2a17113ca92d3e4dae728779572407b2 (diff) | |
apply SCS/PAC/BTI changes to 6.1 kernel too
| -rw-r--r-- | static/releases.html | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/static/releases.html b/static/releases.html index f96a93db..ebf82f52 100644 --- a/static/releases.html +++ b/static/releases.html @@ -732,8 +732,8 @@ <li>run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge the lock method and derived data, but it makes sense to do it after locking too)</li> <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209</li> <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148</li> - <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable</li> - <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI</li> + <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable</li> + <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI</li> <li>kernel (Generic 6.1): apply sysrq hardening changes</li> <li>kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74</li> <li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/121.0.6167.101.2">version 121.0.6167.101.2</a></li> |