From ce3f26d90a9e15a9ae63b9c8b067811dff79f39f Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Fri, 26 Jan 2024 23:03:10 -0500 Subject: [PATCH] clarify thermal reboot hardening --- static/releases.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/releases.html b/static/releases.html index 46ea4ab3..516ba889 100644 --- a/static/releases.html +++ b/static/releases.html @@ -755,7 +755,7 @@
  • remove misleading message about device info being sent to Google message before eSIM download
  • hardened_malloc: use tag 0 for freed slots instead of reserving a tag to allow using 15 of 16 possible tag values for random tags (there are 3 dynamic exclusions of the random values for the previous tag along with the 2 current or previous adjacent tags)
  • Settings: prevent disabling Camera2/CameraX extension provider app (Pixel Camera Services for Pixels) since it breaks apps using CameraX
    • -
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro): use a normal reboot on overheating instead of a warm reboot to harden against physical attacks
    • +
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro): use a normal reboot on overheating instead of an emergency reboot to harden against physical attacks
  • kernel: enable reset attack mitigation for UEFI systems supporting it (Tensor Pixels use minimalistic littlekernel-based boot firmware rather than UEFI and the previous Snapdragon Pixels using UEFI didn't implement this but we may need this for future devices)
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.208
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.147