This commit is contained in:
Daniel Micay 2019-10-15 07:55:35 -04:00
parent 9caedd8eb1
commit c1a85ab5ed

View File

@ -293,9 +293,9 @@ cd ../..</pre>
<p>As part of the hardening in GrapheneOS, it uses fully monolithic kernel builds with
dynamic kernel modules disabled. This improves the effectiveness of mitigations like
Control Flow Integrity benefiting from whole program analysis. It also reduces attack
surface and complexity somewhat including making the build system simpler. The kernel
trees marked as using a separate build above need to have the device variant passed to
the GrapheneOS kernel build script to select the device.</p>
surface and complexity including making the build system simpler. The kernel trees
marked as using a separate build above need to have the device variant passed to the
GrapheneOS kernel build script to select the device.</p>
<p>For the Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL, the kernel repository uses
submodules for building in out-of-tree modules. You need to make sure the submodule