Damus
Open in Damus
GrapheneOS · 3w
Android extended SELinux with support for ioctl command allowlists to reduce kernel attack surface. These ioctl command allowlists are used for sockets and many other core kernel devices to limit atta...
 GrapheneOS profile picture
GrapheneOS @GrapheneOS
The site for Copy Fail says it impacts every mainstream Linux distribution but that's not really the case. Mainstream mobile Linux is based on AOSP and doesn't have nearly as much kernel attack surface as desktop and server distributions combined with having much more hardening enabled.

https://copy.fail/
1❤️2
GrapheneOS · 3w
We'll be moving this kind of content to our forum soon where we can write more about it and use proper formatting including headers and relevant inline images. We haven't moved to the new approach yet but we've also published this thread on our forum too: https://discuss.grapheneos.org/d/35110-grap...