improve user authentication for our settings

This commit is contained in:
Daniel Micay 2024-06-20 10:35:30 -04:00
parent acd61e8ab0
commit 9cf10e7afd

View File

@ -786,7 +786,8 @@
<li>extend USB-C port setting to also handle pogo pins on the Pixel Tablet</li> <li>extend USB-C port setting to also handle pogo pins on the Pixel Tablet</li>
<li>kernel (5.10, 5.15, 6.1, 6.6): replace our deny_new_usb feature with a new deny_new_usb2 feature also disabling USB gadgets</li> <li>kernel (5.10, 5.15, 6.1, 6.6): replace our deny_new_usb feature with a new deny_new_usb2 feature also disabling USB gadgets</li>
<li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense disabling new USB connections and then USB data at a hardware level, in case the USB controller is compromised or doesn't work correctly</li> <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense disabling new USB connections and then USB data at a hardware level, in case the USB controller is compromised or doesn't work correctly</li>
<li>require user authentication for changing auto-reboot, USB peripheral and USB-C port security settings</li> <li>Settings: require user authentication for changing auto-reboot, USB peripheral and USB-C port security settings</li>
<li>Settings: avoid prompting for user authentication when selecting the same value as before for GrapheneOS settings requiring it</li>
<li>temporarily add back memory tagging exception for Pixel wifi_ext service</li> <li>temporarily add back memory tagging exception for Pixel wifi_ext service</li>
<li>add GrapheneOS Linux kernel port to the 6.6 GKI LTS branch</li> <li>add GrapheneOS Linux kernel port to the 6.6 GKI LTS branch</li>
<li>kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.215</li> <li>kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.215</li>