From b54b2305a9734699842a3e1ff3fe4fa37271ecd4 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Wed, 17 Aug 2022 20:27:46 -0400
Subject: [PATCH] phasing out monolithic kernel builds for now

Monolithic kernel builds are currently impractical due to frequent
compatibility issues when drivers are built into the kernel instead of
as dynamic kernel modules. We also benefit from using GKIs too much to
switch to using the device kernel tree for the kernel image for 6th gen
Pixels.
---
 static/features.html | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/static/features.html b/static/features.html
index 1e1d48bf..0d2025e4 100644
--- a/static/features.html
+++ b/static/features.html
@@ -310,10 +310,9 @@
                             <li>
                                 Hardened kernel
                                 <ul>
-                                    <li>Support for dynamically loaded kernel modules is disabled and
-                                    the minimal set of modules for the device model are built into the
-                                    kernel to substantially improve the granularity of Control Flow
-                                    Integrity (CFI) and reduce attack surface.</li>
+                                    <li>Full LTO (Link Time Optimization) is used instead of
+                                    ThinLTO to provide improved Control Flow Integrity (CFI)
+                                    granularity.</li>
                                     <li>4-level page tables are enabled on arm64 to provide a much larger
                                     address space (48-bit instead of 39-bit) with significantly higher
                                     entropy Address Space Layout Randomization (33-bit instead of