security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

clarify that cachestat is already blocked for apps

Browse Source
This commit is contained in:
Daniel Micay 2024-10-31 22:05:04 -04:00
parent deb0ae0288
commit 28ac396b04
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
static/releases.html
View File

@ -565,7 +565,7 @@
<li>enable stamp configuration for microdroid kernel builds to set LOCALVERSION based on version control information as expected</li>
<li>kernel (6.6): disable unused hibernation support</li>
<li>kernel (6.6): disable unused TIOCSTI ioctl (already blocked via standard Android SELinux ioctl filtering)</li>
<li>kernel (6.6): disable unused cachestat system call</li>
<li>kernel (6.6): disable unused cachestat system call (already blocked for apps via standard Android seccomp-bpf policy)</li>
<li>kernel (6.6): enable random kmalloc caches for x86_64 and microdroid too, not only bare metal arm64</li>
<li>kernel (6.6): enable full struct randomization for x86_64 and microdroid too, not only bare metal arm64</li>
<li>kernel (6.6): enable DEBUG_SG for microdroid too, not only bare metal</li>