In the past, when GrapheneOS was in a better state, the latest kernel.org LTS branches were promptly merged along with additional fixes not included in the upstream branches. The fix for the bug now assigned CVE-2019-2215 was already applied for the Pixel 1 and 2.
Conversation
Unfortunately, due to lack of resources and support, it hasn't yet been possible to start doing this for the ongoing revival of the project. In the past, I used to do it myself, but don't have the time and energy available anymore and people aren't stepping up to fill that gap.
3
4
7
Replying to
There's supposed to be a stable-base branch with all of the LTS kernel patches cherry picked on top of the AOSP kernel branch for the device. Every month, it needs to be rebased on top of the new AOSP kernel tag. They eventually merge these changes in quarterly / yearly releases.
2
1
Replying to
You can look at the kernel repositories in AndroidHardeningArchive to see what I used to do before. I did more recent work on this than what's in that particular archive, but GrapheneOS as it currently exists doesn't yet have this kind of work. It's on the list of things to do.
Cannot really do it right now without the necessary team to keep it maintained. It's supposed to be happening, but I don't want to do it all myself and I can't take on the responsibility of maintaining it myself. The same applies to many other things too. It's the sad reality.
1
1
Replying to
I wish I had millions to fund your work, but I can only offer some spare time :(
1
Show replies