diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-08-17 20:27:46 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-08-25 23:15:08 -0400 |
| commit | b54b2305a9734699842a3e1ff3fe4fa37271ecd4 (patch) | |
| tree | 45d41860a15e26db71ce5a097e44e5ad8697966e | |
| parent | 8b673da903baa7e64eb32840c5a0e9203887d2bd (diff) | |
phasing out monolithic kernel builds for now
Monolithic kernel builds are currently impractical due to frequent
compatibility issues when drivers are built into the kernel instead of
as dynamic kernel modules. We also benefit from using GKIs too much to
switch to using the device kernel tree for the kernel image for 6th gen
Pixels.
| -rw-r--r-- | static/features.html | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/static/features.html b/static/features.html index 1e1d48bf..0d2025e4 100644 --- a/static/features.html +++ b/static/features.html @@ -310,10 +310,9 @@ <li> Hardened kernel <ul> - <li>Support for dynamically loaded kernel modules is disabled and - the minimal set of modules for the device model are built into the - kernel to substantially improve the granularity of Control Flow - Integrity (CFI) and reduce attack surface.</li> + <li>Full LTO (Link Time Optimization) is used instead of + ThinLTO to provide improved Control Flow Integrity (CFI) + granularity.</li> <li>4-level page tables are enabled on arm64 to provide a much larger address space (48-bit instead of 39-bit) with significantly higher entropy Address Space Layout Randomization (33-bit instead of |