kees

# grsecurity

## integrated

- PERF_HARDEN - local kernel attack surface reduction, landed as perf_event_paranoid=3 by default in AOSP
- DENYUSB - physical attack surface reduction, tied to screen lock state by default (setting exposes on, off, dynamic)
* DEVICE_SIDECHANNEL - closes time-based sidechannels for device types

## wanted