security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

phasing out monolithic kernel builds for now

Browse Source 
Monolithic kernel builds are currently impractical due to frequent
compatibility issues when drivers are built into the kernel instead of
as dynamic kernel modules. We also benefit from using GKIs too much to
switch to using the device kernel tree for the kernel image for 6th gen
Pixels.
This commit is contained in:
Daniel Micay 2022-08-17 20:27:46 -04:00
parent 8b673da903
commit b54b2305a9
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
static/features.html
View File

@ -310,10 +310,9 @@
<li> <li>
Hardened kernel Hardened kernel
<ul> <ul>
<li>Support for dynamically loaded kernel modules is disabled and <li>Full LTO (Link Time Optimization) is used instead of
the minimal set of modules for the device model are built into the ThinLTO to provide improved Control Flow Integrity (CFI)
kernel to substantially improve the granularity of Control Flow granularity.</li>
Integrity (CFI) and reduce attack surface.</li>
<li>4-level page tables are enabled on arm64 to provide a much larger <li>4-level page tables are enabled on arm64 to provide a much larger
address space (48-bit instead of 39-bit) with significantly higher address space (48-bit instead of 39-bit) with significantly higher
entropy Address Space Layout Randomization (33-bit instead of entropy Address Space Layout Randomization (33-bit instead of