MTE is used in production now

This commit is contained in:
Daniel Micay 2023-11-29 20:23:13 -05:00
parent 6e4e50352e
commit 58841a8c9f

View File

@ -217,11 +217,10 @@
<p>8th generation Pixels provide a minimum guarantee of 7 years of support
from launch instead of the previous 5 year minimum guarantee. 8th generation
Pixels also bring support for the incredibly powerful hardware memory tagging
security feature as part of moving to new ARMv9 CPU cores. GrapheneOS has
experimental support for hardware memory tagging in hardened_malloc available
as a user-facing option in the advanced security settings and is quickly
moving towards having it enabled by default. It will be used more extensively
in the future and is a game changer for protecting against exploitation.</p>
security feature as part of moving to new ARMv9 CPU cores. GrapheneOS uses
hardware memory tagging by default to protect the base OS and known compatible
user installed apps against exploitation, with the option to use it for all
apps and opt-out on a case-by-case basis for the few incompatible with it.</p>
<p>Both 7th and 6th generation Pixels have a minimum guarantee of 5 years from
launch. 7th generation Pixels are a year newer so they have an extra year of