From 2dd17cd3893c189cc9266b52b4ad2befdbaa3b9d Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sat, 22 Oct 2022 05:22:28 -0400 Subject: [PATCH] forced kernel module signing for 4th/5th gen --- static/releases.html | 1 + 1 file changed, 1 insertion(+) diff --git a/static/releases.html b/static/releases.html index 44aac56f..802b2c26 100644 --- a/static/releases.html +++ b/static/releases.html @@ -639,6 +639,7 @@
  • GmsCompatConfig: stub out privileged BluetoothDevice#setSilenceMode
  • GmsCompatConfig: disable CAST_CONNECTION_NOTIFY popup dialogs
  • GmsCompatConfig: fix crash in FastPair service
    • +
  • kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): enable forced kernel module signing with a per-build signing key (RSA 4096 / sha256) as an additional lower level layer of security beyond the verification already provided by dm-verity and SELinux
  • kernel (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): disable IP_SCTP
  • kernel (Pixel 4a): enable REFCOUNT_FULL
  • Pixel 7, Pixel 7 Pro: fix bug in detection of the camera service executable (inconsequential in practice for this specific case of the bug)