From 3815dbf895cb6349e86f36bd119d93b759ce10ec Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Thu, 30 Mar 2023 05:09:20 -0400 Subject: [PATCH] switch to linux-hardened BPF JIT configuration --- static/releases.html | 1 + 1 file changed, 1 insertion(+) diff --git a/static/releases.html b/static/releases.html index 99eee5b4..57ee5260 100644 --- a/static/releases.html +++ b/static/releases.html @@ -680,6 +680,7 @@
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.176
  • kernel (Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.98
  • kernel (Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10, Generic 5.15): add back our slab allocator canary feature
    • +
  • kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10, Generic 5.15): align with linux-hardened BPF JIT configuration (always on with JIT hardening enabled in all cases)
  • add generic compatibility shim catching the exception from the Gservices provider being missing to enable apps like Google Camera and the Pixel eSIM firmware app to work without GSF installed since they don't have any actual hard dependency on Play services
  • remove unnecessary INTERNET (Network) permission from Pixel eSIM firmware app
  • enable Pixel eSIM firmware app by default instead of it being part of the eSIM activation toggle which is now only used for the eSIM activation app (Google eUICC LPA)