linux-hardened
linux-hardened copied to clipboard
GrapheneOS
Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable...
For example, PaX MPROTECT prevents relro sections from becoming writable again.
Ideally this would use a keyed hash, but SipHash is likely too slow. The `random ^ canary_address` technique doesn't even make each one unique on little endian architectures due to...
Ideally, out-of-line metadata like bitmaps would be used. However, progress can be made without any drastic changes particularly when canaries are enabled. It would be nice to have fast range-checking...
Metadata
Owner
Metadata
Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable...