From c1a85ab5ed4688021ec6d30b34f307cdd141ff62 Mon Sep 17 00:00:00 2001
From: Daniel Micay As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with
dynamic kernel modules disabled. This improves the effectiveness of mitigations like
Control Flow Integrity benefiting from whole program analysis. It also reduces attack
- surface and complexity somewhat including making the build system simpler. The kernel
- trees marked as using a separate build above need to have the device variant passed to
- the GrapheneOS kernel build script to select the device.
For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses submodules for building in out-of-tree modules. You need to make sure the submodule