Skip to content

Conversation

@RKNF404
Copy link
Collaborator

@RKNF404 RKNF404 commented Dec 24, 2025

No description provided.

@RKNF404 RKNF404 changed the title chore(build): bundle package ANGLE and Vulkan libraries chore(build): bundle packaged ANGLE and Vulkan libraries Dec 24, 2025
@RoyalOughtness
Copy link
Contributor

This was enabled on everything but mac, but was reverted in May due to failures: https://source.chromium.org/chromium/chromium/src/+/fca377a5f55584c1d9d6820d13b63405af0344f4

@RKNF404
Copy link
Collaborator Author

RKNF404 commented Dec 26, 2025

@RoyalOughtness my local build passed. We can easily revert n the case of failure

@RoyalOughtness
Copy link
Contributor

@RoyalOughtness my local build passed. We can easily revert n the case of failure

Got it, what's the benefit of this though out of curiosity?

@RKNF404
Copy link
Collaborator Author

RKNF404 commented Dec 27, 2025

@RoyalOughtness it makes trivalent itself more portable. It also increases the number of CFI protected instuctions by ~5k. (Check with llvm-cfi-verify)
It also adds 5k unprotected instuctions, but it being a shared object currently (without this PR), CFI does not offer any protection anyway so it is a net positive.

EDIT: It also allows use to reject access to these libraries in the GPU sandbox.

@RoyalOughtness RoyalOughtness merged commit 439b1a8 into secureblue:live Dec 27, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants