reword
This commit is contained in:
parent
9caedd8eb1
commit
c1a85ab5ed
@ -293,9 +293,9 @@ cd ../..</pre>
|
|||||||
<p>As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with
|
<p>As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with
|
||||||
dynamic kernel modules disabled. This improves the effectiveness of mitigations like
|
dynamic kernel modules disabled. This improves the effectiveness of mitigations like
|
||||||
Control Flow Integrity benefiting from whole program analysis. It also reduces attack
|
Control Flow Integrity benefiting from whole program analysis. It also reduces attack
|
||||||
surface and complexity somewhat including making the build system simpler. The kernel
|
surface and complexity including making the build system simpler. The kernel trees
|
||||||
trees marked as using a separate build above need to have the device variant passed to
|
marked as using a separate build above need to have the device variant passed to the
|
||||||
the GrapheneOS kernel build script to select the device.</p>
|
GrapheneOS kernel build script to select the device.</p>
|
||||||
|
|
||||||
<p>For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses
|
<p>For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses
|
||||||
submodules for building in out-of-tree modules. You need to make sure the submodule
|
submodules for building in out-of-tree modules. You need to make sure the submodule
|
||||||
|
Loading…
x
Reference in New Issue
Block a user