From 9caedd8eb17acb55538a16afd9a3f6e0ff0a008a Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 15 Oct 2019 07:41:42 -0400 Subject: [PATCH] clarify separate kernel builds --- static/build.html | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/static/build.html b/static/build.html index da4362bb..475f290e 100644 --- a/static/build.html +++ b/static/build.html @@ -286,15 +286,15 @@ cd ../..

As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with dynamic kernel modules disabled. This improves the effectiveness of mitigations like Control Flow Integrity benefiting from whole program analysis. It also reduces attack surface and complexity somewhat including making the build system simpler. The kernel - trees marked as using a split build above need to have the device variant passed to + trees marked as using a separate build above need to have the device variant passed to the GrapheneOS kernel build script to select the device.

For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses