[Nexus S Android Development] novic_dev:
AniDroid-Hardened Kernel​

Short Kernel information:​

AniDroid-Hardened Kernel is the first Hardened kernel for Android that uses GRSecurity subsystem to provide different useful Security functionality.

AniDroid-Hardened Kernel now is in early stage of developing but it's almost ready for using and testing on Nexus S devices ;)

AniDroid-Hardened Kernel was built with the latest Linaro Toolchain (GCC 4.6.3)​

Provided Features:

Linux Kernel version 3.0.27 based on the latest ICS 4.0.4 Kernel Source

GRSecurity version 2.2.2 with different security features enabled by default (see GRSecurity Feature List for details)

CPU Overclocking (OC) support

Advanced CPU LiveOC!!! (ALOC) support with Selective LiveOC MOD (Thanks to byeonggonlee! In most cases LiveOC and OC itself need overvolting (OV) due to stability issues! Each device has it's own stability limit, some devices don't need OV with lite OC. So, in most cases you need to choose optimal OV value on each OC value for your own device!)

EXT4, NTFS, CIFS support

init.d support

Compatible with any OTA-based and AOSP ICS Roms

Can be managed with NSTOOLS

Voodoo Sound and Vodoo Colors Android kernel improvements

HIGH BIGMEM that provides more available memory for Android on device

Backlight Notification(BLN, enabled by default with blinking)

Backlight Dimmer(BLD, disabled by default)

Battery Life Extender (BLX, enabled by default)

TouchWake (TW, enabled by default)

Custom Voltage Interface support

Deep Idle version 2 (thanks to Ezekeel, disabled for now due to stability issues!)

CPUIdle from Linux 3.2.x backport

SLQB Memory Allocator

USB OTG (Build 5) support (use it with this app)

Blue Colors support for Screen Color Scheme

Stock 60 FPS, 45 FPS and 65 FPS Screen Refresh Rate support (you can see the difference in Battery Drain)

1024 Kb ReadAhead support

Automatic Process Group Scheduling

-fstack-protector buffer overflow detection

USB Fast Charge (FC) feature that force adapters that are detected as USB to charge as AC enabled (can be managed with NSTOOLS)

GRSecurity Feature List:​

Active Exploits Protection (deter exploit bruteforcing, active kernel exploit response)

Role Based Access Control (RBAC)

Filesystem Advanced Protection (including advanced security for applications running in CHROOT environment)

Full Kernel Auditing (event logging for many process-related kernel events)

Executable Protection (deter ptrace-based process snooping)

Network Protection (TCP/UDP blackhole and LAST_ACK DoS prevention)

Larger Entropy Pools support (adds additional randomness to grsecurity features)

Managing support via Sysctl Interface

CPU Frequence Scaling Governors:​

SavagedZen

OndemandX

Ondemand (Default)

Brazilianwax

Intellidemand

Wheatley

Lagfree

InteractiveX

Interactive

Conservative

Lulzactive (tweaked version)

Minmax

Lazy

SmartassV2 (tweaked Smartass)

Smartass

Powersave

Scary

Lionheart

Performance

IO Schedulers:​

CFQ (Default)

Noop

Deadline (tweaked for flash devices)

Simple IO (SIO)

Bfq

Vr

Links:​

Current Kernel Binaries:

AniDroid_Hardened_B13_45Hz.zip

AniDroid_Hardened_B13_60Hz.zip

Old Kernel Binaries:

Old binaries on SourceForge

Kernel Source:

AniDroid on GitHub

Info Screenshots:​

View attachment 926720 View attachment 998948 View attachment 998942 View attachment 998943

Benchmark Screenshots:​

View attachment 927887

Changelogs:​

Alpha 1 - Alpha 1 build2:​

Kernel flashable ZIP was repacked into the Any Kernel skeleton by koush

Kernel flashable ZIP now includes Lights Library (/system/lib/hw/lights.s5pc110.so)

Alpha 1 build2 - Alpha 2:​

Many of GRSecurity features tested and enabled by default (see GRSecurity Working Feature List for details)

Kernel Heap Randomization enabled (randomizing heap placement makes heap exploits harder)

Advanced LiveOC (ALOC) support with Selective LiveOC MOD

Backlight Dimmer(BLD) is now disabled by default

Alpha 2 - Beta 1:​

Deep Idle version 2 support added (thanks to Ezekeel)

Fstack Protector buffer overflow detection feature added

Near Field Communication (NFC) devices support enabled

RCU Priority Boosting feature enabled (useful for realtime apps, prevents from blocking RCU callback on heavy loads)

L2TP protocol support added

LulzactiveV2 governor renamed to Lulzactive to improve NSTOOLS support

SLQB Memory Allocator with GRSecurity integration added (disabled for now, need testing! Now SLUB is used instead)

Bfq and Vr I/O schedulers added

Beta 1 - Beta 2:​

SLQB Memory Allocator enabled

CPUIdle from Linux 3.2.x backported and enabled

Deep Idle V2 disabled for now due to stability issues

Beta 2 - Beta 3:​

USB OTG (Build 5) support added

Beta 3 - Beta 4:​

SLUB Memory Allocator is now used due to stability issues on some devices

50 FPS and 65 FPS Screen Refresh Rate support added (to compare the performance and battery life)

Default Screen Colors were set to Blue Colors

Default I/O Scheduler is now set to VR

Different stability improvements

Beta 4 - Beta 4 Build2:​

60 FPS Screen Refresh Rate support added

Beta 4 - Beta 5:​

Increased default ReadAhead value to 1024 kB

SLOB Memory Allocator is used as more efficient to get more free memory

45 FPS and 65 FPS kernels are available (45 FPS kernel must have better battery life and have to be tested!!!)

Added optimized compiler flags

Many different stability improvements

Beta 5 - Beta 6:​

TCP tweaks added (thanks to Brainmaster)

Memory tweaks added (thanks to Brainmaster)

Boot issue fix for i9020 AMOLED added (need to be tested!!!)

Boot animation removed

Beta 6 - Beta 7:​

Display Driver bug fixed that prevented to set the correct Refresh Rate on some devices

Default I/O Scheduler changed to CFQ

Reverted to SLUB Memory Allocalor

SLUB Memory Allocalor debugging support disabled

Automatic Process Group Scheduling feature enabled

-fstack-protector security feature disabled (needs testing, will be enabled in stable release)

Beta 7 - Beta 8:​

USB Fast Charge feature that force adapters that are detected as USB to charge as AC enabled

SLQB Memory Allocalor now used

Many different stability improvements and bugfixes

Beta 8 - Beta 9:​

Smartassv2 SYSFS interface bug fixed

Advanced LiveOC (ALOC) reenabled

45 FPS kernel available

Beta 9 - Beta 10:​

USB Fast Charge bug fixed

Beta 10 - Beta 11:​

All code was rebased on Linux 3.0.27

Lulzactive bug fixed

USB Fast Charge can now be managed with NSTools

Many GRsecurity bugs fixed

GRsecurity features are now enabled by default

Advanced LiveOC improvements (now you can set low ang high values for ALOC)

CPU Deep Idle can now be enabled with NSTools

Status line during kernel init was removed

I/O Schedulers code updated

High Bigmem support added (up to 395 Mb of RAM)

Beta 11 - Beta 13:​

Boot freezes and random reboots bug fixed!

WARNING!!!

AniDroid Hardened Kernel is still need testing!

So, you can flash and use this kernel at your oun risk! :) ​

Great Thanks to eugene373 for the kernel base!!!

Thanks to eugene373, koush, ezekeel, supercurio, morfic, franciscofranco, sztupy, reddv1, byeonggonlee!!!

​