diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-05-09 14:20:23 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-05-09 14:20:23 -0400 |
| commit | 2170c3d112cd55978ad9c58aed5bcf60345e5938 (patch) | |
| tree | 4b4b8a23e56868fb31bb31696aba78ad9b32e24e /static/features.html | |
| parent | de692238a9c25efaa279f3b9600f3b0d477690c5 (diff) | |
split out more complete patching section
Diffstat (limited to 'static/features.html')
| -rw-r--r-- | static/features.html | 22 |
1 files changed, 20 insertions, 2 deletions
diff --git a/static/features.html b/static/features.html index b19b8a0f..5fb5980b 100644 --- a/static/features.html +++ b/static/features.html @@ -88,6 +88,7 @@ <li> <a href="#grapheneos">GrapheneOS</a> <ul> + <li><a href="#more-complete-patching">More complete patching</a></li> <li><a href="#disabling-secondary-user-app-installation">Disabling secondary user app installation</a></li> <li><a href="#user-installed-apps-can-be-disabled">User installed apps @@ -312,10 +313,27 @@ <li><a href="/usage#sandboxed-play-services">Compatibility layer for coercing user installed Google Play services into running as sandboxed apps without any special privileges.</a></li> - <li>Fixes for multiple serious vulnerabilities not yet fixed upstream due to a - flexible release cycle / process prioritizing security.</li> </ul> + <section id="more-complete-patching"> + <h3><a href="#more-complete-patching">More complete patching</a></h3> + + <p>GrapheneOS includes fixes for many vulnerabilities not yet fixed in + Android. On modern devices with Generic Kernel Image (GKI) support, we the + kernel to the latest stable GKI release many months before the stock OS gets + the update. This means we're shipping hundreds of fixes not included in the + stock OS including many security fixes. We also backport more fixes on top of + this for the kernel and for other components too.</p> + + <p>We often new vulnerabilities ourselves and report them upstream. We've + reported dozens of vulnerabilities for both the generic Android codebase and + also for Pixels specifically.</p> + + <p>Our overall approach is to focus on systemic privacy and security + improvements but fixing individual vulnerabilities is still very + important.</p> + </section> + <section id="disabling-secondary-user-app-install"> <h3><a href="#disabling-secondary-user-app-installation">Disabling secondary user app installation</a></h3> |