diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-10-25 21:45:34 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-10-25 23:23:40 -0400 |
| commit | a6eb66be4e00f9363e6b8aae03e3b57e17b78c2c (patch) | |
| tree | 703f944deb4aac1daf1ab1a4652b991a8ea7d1c3 /static/releases.html | |
| parent | 8e31b28fdbb21c995d3c120ed11862f33119aea5 (diff) | |
6.6 kernel configuration hardening
Diffstat (limited to 'static/releases.html')
| -rw-r--r-- | static/releases.html | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index b4337349..8abe1bab 100644 --- a/static/releases.html +++ b/static/releases.html @@ -540,6 +540,16 @@ <p>Changes since the 2024102400 release:</p> <ul> + <li>kernel (6.6): disable unused hibernation support</li> + <li>kernel (6.6): disable unused TIOCSTI ioctl (already blocked via standard Android ioctl filtering)</li> + <li>kernel (6.6): disable unused cachestat system call</li> + <li>kernel (6.6): enable random kmalloc caches for x86_64 and microdroid too, not only bare metal arm64</li> + <li>kernel (6.6): enable full struct randomization for x86_64 and microdroid too, not only bare metal arm64</li> + <li>kernel (6.6): enable DEBUG_SG for microdroid too, not only bare metal</li> + <li>kernel (6.6): enable FORTIFY_SOURCE for microdroid too, not only bare metal</li> + <li>kernel (6.6): disable BINFMT_MISC for microdroid too, not only bare metal</li> + <li>kernel (6.6): disable RSEQ for microdroid too, not only bare metal</li> + <li>kernel (6.6): use the same KFENCE configuration for microdroid as bare metal</li> <li>System Updater: update minimum and target API level to 35 (Android 15)</li> </ul> </article> |