diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2019-10-15 07:41:42 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2019-10-15 07:42:08 -0400 |
| commit | 9caedd8eb17acb55538a16afd9a3f6e0ff0a008a (patch) | |
| tree | e8cd9644688eb243c06b307626872bd1b2d785e0 /static/build.html | |
| parent | 3669cfe990f05b545460fdf4f51500aad70aa525 (diff) | |
clarify separate kernel builds
Diffstat (limited to 'static/build.html')
| -rw-r--r-- | static/build.html | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/static/build.html b/static/build.html index da4362bb..475f290e 100644 --- a/static/build.html +++ b/static/build.html @@ -286,15 +286,15 @@ cd ../..</pre> <ul> <li>Pixel, Pixel XL: marlin - shared build</li> - <li>Pixel 2, Pixel 2 XL: wahoo - split build due to hardening</li> - <li>Pixel 3, Pixel 3 XL, Pixel 3a, Pixel 3a XL: crosshatch - split build due to hardening</li> + <li>Pixel 2, Pixel 2 XL: wahoo - separate taimen and walleye builds due to hardening</li> + <li>Pixel 3, Pixel 3 XL, Pixel 3a, Pixel 3a XL: crosshatch - separate crosshatch, blueline and bonito builds due to hardening</li> </ul> <p>As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with dynamic kernel modules disabled. This improves the effectiveness of mitigations like Control Flow Integrity benefiting from whole program analysis. It also reduces attack surface and complexity somewhat including making the build system simpler. The kernel - trees marked as using a split build above need to have the device variant passed to + trees marked as using a separate build above need to have the device variant passed to the GrapheneOS kernel build script to select the device.</p> <p>For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses |