forced kernel module signing for 4th/5th gen

Author: thestinger

static/releases.html

@@ -639,6 +639,7 @@ <h3><a href="#2022101800">2022101800</a></h3>
                         <li>GmsCompatConfig: stub out privileged BluetoothDevice#setSilenceMode</li>
                         <li>GmsCompatConfig: disable CAST_CONNECTION_NOTIFY popup dialogs</li>
                         <li>GmsCompatConfig: fix crash in FastPair service</li>
+                        <li>kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): enable forced kernel module signing with a per-build signing key as an additional layer of security beyond what's provided by verified boot and SELinux</li>
                         <li>kernel (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): disable IP_SCTP</li>
                         <li>kernel (Pixel 4a): enable REFCOUNT_FULL</li>
                         <li>Pixel 7, Pixel 7 Pro: fix bug in detection of the camera service executable (inconsequential in practice for this specific case of the bug)</li>