Live data from Hacker News

Hardening the Kernel in Android Oreo

android-developers.googleblog.com

11–20 of 108 posts

Re: Hardening the Kernel in Android Oreo

#11
post #4

"Android 8.0 makes KASLR available in Android kernels 4.4 and newer." And yet on my pixel with Android 8.0, I am only using 3.18.52. Who actually ships Android with kernel 4.x?

I also have 3.18 on my Pixel XL. I assume the unreleased Pixel 2 devices will be running kernel 4.4 if that's what they targeted.

They probably wanted to back port it to 3.18 but it was too much work. I'm pretty disappointed they didn't move the Pixel forward to a new kernel though, this seems to be one of the biggest issues with Android.

Re: Hardening the Kernel in Android Oreo

#12
post #2

Nice set of features, that the majority of Android users will only get in a few years. Maybe we should start making bets if Android Oreo be able to beat Nougat and be above 13.5% next year this time around.

You probably know this but because of project Treble for future versions after Android Oreo will probably be adopted more quickly. It is unlikely for Oreo to do much better then Nougat then from what I have read.

Anyone beliveing that project Treble will change anything should listen to the ADB Podcast about it.

http://androidbackstage.blogspot.de/2017/08/episode-75-proje...

Key points:

1 - Google will keep on allowing OEMs to customize Android

2 - OEMs will keep being responsible for delivering updates

3 - OEMs are advised to push fixes upstream and provide updates

Given that they are just advised, and not required to act accordingly, do you want to bet how many will provide Treble updates instead of selling new handsets?

Re: Hardening the Kernel in Android Oreo

#13
post #4

"Android 8.0 makes KASLR available in Android kernels 4.4 and newer." And yet on my pixel with Android 8.0, I am only using 3.18.52. Who actually ships Android with kernel 4.x?

I also have 3.18 on my Pixel XL. I assume the unreleased Pixel 2 devices will be running kernel 4.4 if that's what they targeted. They probably wanted to back port it to 3.18 but it was too much work. I'm pretty disappointed they didn't move the Pixel forward to a new kernel though, this seems to be one of the biggest issues with Android.

Quite disappointing, yet another bad example for OEMs.

Re: Hardening the Kernel in Android Oreo

#14
post #4

"Android 8.0 makes KASLR available in Android kernels 4.4 and newer." And yet on my pixel with Android 8.0, I am only using 3.18.52. Who actually ships Android with kernel 4.x?

I also have 3.18 on my Pixel XL. I assume the unreleased Pixel 2 devices will be running kernel 4.4 if that's what they targeted. They probably wanted to back port it to 3.18 but it was too much work. I'm pretty disappointed they didn't move the Pixel forward to a new kernel though, this seems to be one of the biggest issues with Android.

I hope so, but given that 3.18 was released almost three years ago I am not holding my breath.

Re: Hardening the Kernel in Android Oreo

#17
post #4

"Android 8.0 makes KASLR available in Android kernels 4.4 and newer." And yet on my pixel with Android 8.0, I am only using 3.18.52. Who actually ships Android with kernel 4.x?

I was surprised to read that in the article.

New android phones from top vendors (not the $50 junk devices) ship with 3.x kernels?

Wow.

Re: Hardening the Kernel in Android Oreo

#18
Great to see Google linking to the LWN articles on these features. I always like to see LWN get noticed for their fantastic kernel work.

It's the primary reason I've been a subscriber since they introduced subscriptions all those years ago.

Re: Hardening the Kernel in Android Oreo

#19
post #12

Earlier quoted context omitted.

You probably know this but because of project Treble for future versions after Android Oreo will probably be adopted more quickly. It is unlikely for Oreo to do much better then Nougat then from what I have read.

Anyone beliveing that project Treble will change anything should listen to the ADB Podcast about it. http://androidbackstage.blogspot.de/2017/08/episode-75-proje... Key points: 1 - Google will keep on allowing OEMs to customize Android 2 - OEMs will keep being responsible for delivering updates 3 - OEMs are advised to push fixes upstream and provide updates Given that they are just advised, and not required to act ac…

That's not what this top comment says https://news.ycombinator.com/item?id=15066729 at least that's how I interpreted it.

Re: Hardening the Kernel in Android Oreo

#20
post #12

Earlier quoted context omitted.

Anyone beliveing that project Treble will change anything should listen to the ADB Podcast about it. http://androidbackstage.blogspot.de/2017/08/episode-75-proje... Key points: 1 - Google will keep on allowing OEMs to customize Android 2 - OEMs will keep being responsible for delivering updates 3 - OEMs are advised to push fixes upstream and provide updates Given that they are just advised, and not required to act ac…

That's not what this top comment says https://news.ycombinator.com/item?id=15066729 at least that's how I interpreted it.

Listen to the podcast.
Post reply on HN