switch to linux-hardened BPF JIT configuration

This commit is contained in:
Daniel Micay 2023-03-30 05:09:20 -04:00
parent ad17de1283
commit 3815dbf895

View File

@ -680,6 +680,7 @@
<li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.176</li>
<li>kernel (Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.98</li>
<li>kernel (Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10, Generic 5.15): add back our slab allocator canary feature</li>
<li>kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10, Generic 5.15): align with linux-hardened BPF JIT configuration (always on with JIT hardening enabled in all cases)</li>
<li>add generic compatibility shim catching the exception from the Gservices provider being missing to enable apps like Google Camera and the Pixel eSIM firmware app to work without GSF installed since they don't have any actual hard dependency on Play services</li>
<li>remove unnecessary INTERNET (Network) permission from Pixel eSIM firmware app</li>
<li>enable Pixel eSIM firmware app by default instead of it being part of the eSIM activation toggle which is now only used for the eSIM activation app (Google eUICC LPA)</li>