security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

6.6 kernel configuration hardening

Browse Source
This commit is contained in:
Daniel Micay 2024-10-25 21:45:34 -04:00
parent 8e31b28fdb
commit a6eb66be4e
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
static/releases.html
View File

@ -540,6 +540,16 @@
<p>Changes since the 2024102400 release:</p>
<ul>
<li>kernel (6.6): disable unused hibernation support</li>
<li>kernel (6.6): disable unused TIOCSTI ioctl (already blocked via standard Android ioctl filtering)</li>
<li>kernel (6.6): disable unused cachestat system call</li>
<li>kernel (6.6): enable random kmalloc caches for x86_64 and microdroid too, not only bare metal arm64</li>
<li>kernel (6.6): enable full struct randomization for x86_64 and microdroid too, not only bare metal arm64</li>
<li>kernel (6.6): enable DEBUG_SG for microdroid too, not only bare metal</li>
<li>kernel (6.6): enable FORTIFY_SOURCE for microdroid too, not only bare metal</li>
<li>kernel (6.6): disable BINFMT_MISC for microdroid too, not only bare metal</li>
<li>kernel (6.6): disable RSEQ for microdroid too, not only bare metal</li>
<li>kernel (6.6): use the same KFENCE configuration for microdroid as bare metal</li>
<li>System Updater: update minimum and target API level to 35 (Android 15)</li>
</ul>
</article>