forced kernel module signing for 4th/5th gen

GrapheneOS · Oct 22, 2022 · 0cb1182 · 0cb1182
1 parent e0e7f45
commit 0cb1182
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/static/releases.html b/static/releases.html
@@ -639,6 +639,7 @@ <h3><a href="#2022101800">2022101800</a></h3>
                         <li>GmsCompatConfig: stub out privileged BluetoothDevice#setSilenceMode</li>
                         <li>GmsCompatConfig: disable CAST_CONNECTION_NOTIFY popup dialogs</li>
                         <li>GmsCompatConfig: fix crash in FastPair service</li>
+                        <li>kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): enable forced kernel module signing with a per-build signing key and sha256 as an additional layer of security beyond what's provided by verified boot and SELinux</li>
                         <li>kernel (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): disable IP_SCTP</li>
                         <li>kernel (Pixel 4a): enable REFCOUNT_FULL</li>
                         <li>Pixel 7, Pixel 7 Pro: fix bug in detection of the camera service executable (inconsequential in practice for this specific case of the bug)</li>