Comment Comment by ylk > The baseband can do a lot, it has dmaThere's an IOMMU:> Is the baseband isolated? > Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations. [...]https://grapheneos.org/faq#baseband-isolation> GrapheneOS cannot really influence this, but hardened_malloc could conceivably help.They can and do, see above. But I don't see how hardened_malloc is related to the baseband doing DMA. parent ylk 8 months ago
There's an IOMMU:
> Is the baseband isolated? > Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations. [...]
https://grapheneos.org/faq#baseband-isolation
> GrapheneOS cannot really influence this, but hardened_malloc could conceivably help.
They can and do, see above. But I don't see how hardened_malloc is related to the baseband doing DMA.