summaryrefslogtreecommitdiff
path: root/static/releases.html
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2024-06-19 09:16:07 -0400
committerDaniel Micay <daniel.micay@grapheneos.org>2024-06-19 09:16:07 -0400
commitc8950ceb04d666ac2f535cf5f91f0db3677d0d57 (patch)
treea87e6128612462cfcbb5130981ab54fa51a5d62d /static/releases.html
parent7214e57ecc609aa4fb7a1b5ef1dfd51fd944a14b (diff)
major USB security improvements
Diffstat (limited to 'static/releases.html')
-rw-r--r--static/releases.html5
1 files changed, 5 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html
index a784c306..8003671f 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -775,6 +775,11 @@
<p>Changes since the 2024061400 release:</p>
<ul>
+ <li>hide USB peripheral security setting when USB-C port setting is available</li>
+ <li>extend USB-C port setting to pogo pins (for Pixel Tablet)</li>
+ <li>kernel (5.10, 5.15, 6.1, 6.6): replace our deny_new_usb feature with a new deny_new_usb2 feature also disabling USB gadgets</li>
+ <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense beyond low-level hardware disabling of new USB connections and then USB data</li>
+ <li>require user authentication for changing auto-reboot, USB peripheral and USB-C port security settings</li>
<li>temporarily add back memory tagging exception for Pixel wifi_ext service</li>
<li>add GrapheneOS Linux kernel port to the 6.6 GKI LTS branch</li>
<li>kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.215</li>