This repository was archived by the owner on Dec 17, 2025. It is now read-only.

Repository navigation

This repository was archived by the owner on Dec 17, 2025. It is now read-only.

Issues

SROP mitigation with SipHash-generated cookies
GrapheneOS-Archive/linux-hardened#74 · opened on Feb 27, 2018
type-based CFI for returns
GrapheneOS-Archive/linux-hardened#66 · opened on Nov 22, 2017
stack clearing
GrapheneOS-Archive/linux-hardened#64 · opened on Nov 22, 2017
struct layout randomization for Clang
GrapheneOS-Archive/linux-hardened#57 · opened on Oct 8, 2017
extend SELinux memory protections to have parity with PaX MPROTECT
GrapheneOS-Archive/linux-hardened#52 · opened on Aug 15, 2017
8
RANDKSTACK for arm64
GrapheneOS-Archive/linux-hardened#45 · opened on Jun 13, 2017
slab FIFO / randomized quarantine (not tied to ASan)
GrapheneOS-Archive/linux-hardened#44 · opened on Jun 9, 2017
improve slub canary generation
GrapheneOS-Archive/linux-hardened#37 · opened on May 21, 2017
improve the robustness of slub page freelists
GrapheneOS-Archive/linux-hardened#36 · opened on May 20, 2017
scope out targeted usage of non-heuristic-based integer overflow checking
GrapheneOS-Archive/linux-hardened#35 · opened on May 18, 2017
scope out targeted usage of the bounds and object-size sanitizers
GrapheneOS-Archive/linux-hardened#34 · opened on May 18, 2017
brute force protection
GrapheneOS-Archive/linux-hardened#15 · opened on May 11, 2017
9
complete __ro_after_init port (__read_only usage not requiring pax_open_kernel/pax_close_kernel)
GrapheneOS-Archive/linux-hardened#10 · opened on May 11, 2017