GitHub - GrapheneOS/linux-hardened: Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Currently maintained at https://github.com/anthraxx/linux-hardened.

2 Branches 134 Tags

Name	Name	Last commit message	Last commit date
Latest commit anthraxx and thestinger enable BPF JIT hardening by default (if available) May 26, 2018 2db4dcd · May 26, 2018 History 712,632 Commits
Documentation	Documentation	hard-wire legacy checkreqprot option to 0	May 26, 2018
arch	arch	x86_64: bound mmap between legacy/modern bases	May 26, 2018
block	block	remove unused softirq_action callback parameter	May 26, 2018
certs	certs	License cleanup: add SPDX GPL-2.0 license identifier to files with no…	Nov 2, 2017
crypto	crypto	crypto: af_alg - fix possible uninit-value in alg_bind()	May 16, 2018
drivers	drivers	add toggle for disabling newly added USB devices	May 26, 2018
firmware	firmware	License cleanup: add SPDX GPL-2.0 license identifier to files with no…	Nov 2, 2017
fs	fs	restrict device timing side channels	May 26, 2018
include	include	regulatory: add NUL to request alpha2	May 26, 2018
init	init	wire up -fsanitize=local-init	May 26, 2018
ipc	ipc	ipc/shm: fix use-after-free of shm file via remap_file_pages()	Apr 24, 2018
kernel	kernel	enable BPF JIT hardening by default (if available)	May 26, 2018
lib	lib	sanity check for negative length in nla_memcpy	May 26, 2018
mm	mm	support randomizing the lower bits of brk	May 26, 2018
net	net	remove unused softirq_action callback parameter	May 26, 2018
samples	samples	samples/bpf: Partially fixes the bpf.o build	Apr 26, 2018
scripts	scripts	add writable function pointer detection	May 26, 2018
security	security	hard-wire legacy checkreqprot option to 0	May 26, 2018
sound	sound	ASoC: samsung: i2s: Ensure the RCLK rate is properly determined	May 25, 2018
tools	tools	seccomp: Add filter flag to opt-out of SSB mitigation	May 22, 2018
usr	usr	initramfs: fix initramfs rebuilds w/ compression after disabling	Nov 3, 2017
virt	virt	KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock	May 22, 2018
.cocciconfig	.cocciconfig	scripts: add Linux .cocciconfig for coccinelle	Jul 22, 2016
.get_maintainer.ignore	.get_maintainer.ignore	Add hch to .get_maintainer.ignore	Aug 21, 2015
.gitattributes	.gitattributes	.gitattributes: set git diff driver for C source code files	Oct 8, 2016
.gitignore	.gitignore	kbuild: rpm-pkg: keep spec file until make mrproper	Feb 13, 2018
.mailmap	.mailmap	.mailmap: Add Maciej W. Rozycki's Imagination e-mail address	Nov 10, 2017
COPYING	COPYING	[PATCH] update FSF address in COPYING	Sep 10, 2005
CREDITS	CREDITS	MAINTAINERS: update TPM driver infrastructure changes	Nov 10, 2017
Kbuild	Kbuild	License cleanup: add SPDX GPL-2.0 license identifier to files with no…	Nov 2, 2017
Kconfig	Kconfig	License cleanup: add SPDX GPL-2.0 license identifier to files with no…	Nov 2, 2017
MAINTAINERS	MAINTAINERS	dt-bindings: Document mti,mips-cpc binding	Mar 15, 2018
Makefile	Makefile	wire up -fsanitize=local-init	May 26, 2018
README	README	README: add a new README file, pointing to the Documentation/	Oct 24, 2016

Repository files navigation

Linux kernel
============

This file was moved to Documentation/admin-guide/README.rst

Please notice that there are several guides for kernel developers and users.
These guides can be rendered in a number of formats, like HTML and PDF.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.
See Documentation/00-INDEX for a list of what is contained in each file.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.

About

Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Currently maintained at https://github.com/anthraxx/linux-hardened.

grapheneos.org/

linux security privacy

Readme

View license

Security policy

Activity

Custom properties

415 stars

38 watching

105 forks

Report repository