diff --git a/Patches/LineageOS-18.1/android_frameworks_base/0006-Disable_Analytics.patch b/Patches/LineageOS-18.1/android_frameworks_base/0006-Disable_Analytics.patch index 065f6719..8c1f7b46 100644 --- a/Patches/LineageOS-18.1/android_frameworks_base/0006-Disable_Analytics.patch +++ b/Patches/LineageOS-18.1/android_frameworks_base/0006-Disable_Analytics.patch @@ -6,11 +6,11 @@ Subject: [PATCH] Disable/reduce functionality of various ad/analytics Change-Id: I84303ee26d0232e471f44ae6eff6e41a2210e42e --- - .../android/content/pm/PackageParser.java | 54 +++++++++++++++++++ - 1 file changed, 54 insertions(+) + .../android/content/pm/PackageParser.java | 56 +++++++++++++++++++ + 1 file changed, 56 insertions(+) diff --git a/core/java/android/content/pm/PackageParser.java b/core/java/android/content/pm/PackageParser.java -index 70e4e6cbf622..645dfc0741da 100644 +index 70e4e6cbf622..44feb7f38653 100644 --- a/core/java/android/content/pm/PackageParser.java +++ b/core/java/android/content/pm/PackageParser.java @@ -5551,6 +5551,62 @@ public class PackageParser { diff --git a/Scripts/Common/Fix_CVE_Patchers.sh b/Scripts/Common/Fix_CVE_Patchers.sh index f3220eb2..51b110c6 100644 --- a/Scripts/Common/Fix_CVE_Patchers.sh +++ b/Scripts/Common/Fix_CVE_Patchers.sh @@ -30,6 +30,11 @@ commentPatches() { fi; } +#XXX: Patches that will compile but break boot completely: +# 0006-AndroidHardening-Kernel_Hardening/3.18/0026.patch +# 0006-AndroidHardening-Kernel_Hardening/3.10/0009.patch +# CVE-2017-13218/4.4/0025.patch + commentPatches android_kernel_amazon_hdx-common.sh "CVE-2021-Misc2/3.4/0055.patch" "CVE-2021-Misc2/3.4/0056.patch"; commentPatches android_kernel_asus_fugu.sh "CVE-2014-2568" "CVE-2014-8559" "CVE-2015-8746" "CVE-2017-5551" "LVT-2017-0003/3.10/0001.patch"; commentPatches android_kernel_asus_grouper.sh "CVE-2017-15868" "CVE-2021-Misc2/3.4/0055.patch" "CVE-2021-Misc2/3.4/0056.patch"; @@ -71,6 +76,7 @@ commentPatches android_kernel_oneplus_msm8998.sh "0008-Graphene-Kernel_Hardening commentPatches android_kernel_oneplus_sm7250.sh "CVE-2018-5873" "CVE-2020-1749" "CVE-2021-3444" "CVE-2021-3600"; commentPatches android_kernel_oneplus_sm8150.sh "CVE-2019-16746" "CVE-2019-19319" "CVE-2020-0067" "CVE-2020-8992" "CVE-2020-24588/4.14/0018.patch"; commentPatches android_kernel_razer_msm8998.sh "0008-Graphene-Kernel_Hardening/4.4/0011.patch" "0008-Graphene-Kernel_Hardening/4.4/0012.patch" "0008-Graphene-Kernel_Hardening/4.4/0014.patch" "0008-Graphene-Kernel_Hardening/4.4/0019.patch" "CVE-2019-14070/ANY/0005.patch" "CVE-2020-16166"; +commentPatches android_kernel_samsung_apq8084.sh "0006-AndroidHardening-Kernel_Hardening/3.10/0009.patch"; commentPatches android_kernel_samsung_exynos5420.sh "CVE-2021-Misc2/3.4/0061.patch" "CVE-2021-Misc2/3.4/0062.patch"; commentPatches android_kernel_samsung_jf.sh "CVE-2019-11599"; commentPatches android_kernel_samsung_manta.sh "CVE-2021-Misc2/3.4/0055.patch" "CVE-2021-Misc2/3.4/0056.patch"; diff --git a/Scripts/LineageOS-16.0/CVE_Patchers/android_kernel_samsung_apq8084.sh b/Scripts/LineageOS-16.0/CVE_Patchers/android_kernel_samsung_apq8084.sh index d2bfcab7..c3722004 100644 --- a/Scripts/LineageOS-16.0/CVE_Patchers/android_kernel_samsung_apq8084.sh +++ b/Scripts/LineageOS-16.0/CVE_Patchers/android_kernel_samsung_apq8084.sh @@ -7,7 +7,7 @@ git apply $DOS_PATCHES_LINUX_CVES/0005-AndroidHardening-Deny_USB/3.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0004-No_dir-relax.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0007.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0008.patch -git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0009.patch +#git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0009.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0010.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0013.patch git apply $DOS_PATCHES_LINUX_CVES/0006-AndroidHardening-Kernel_Hardening/3.10/0014.patch diff --git a/Scripts/LineageOS-18.1/Functions.sh b/Scripts/LineageOS-18.1/Functions.sh index ff4d9c61..061dd2df 100644 --- a/Scripts/LineageOS-18.1/Functions.sh +++ b/Scripts/LineageOS-18.1/Functions.sh @@ -132,6 +132,13 @@ patchWorkspace() { #source build/envsetup.sh; #repopick -it eleven-firewall; + #repopick -i 305407 320916; #Check ACCELEROMETER_ROTATION_ANGLES for current user + #repopick -i 314017 314130; #adbconnection: don't spin if adbd isn't running + #repopick -i 314453; #TaskViewTouchController: Null check current animation on drag + #repopick -i 315116; #SystemUI: Set brightness slider view restriction from the right thread + #repopick -i 320663; #Trebuchet: Don't hide home screen rotation setting + #repopick -i 320914 320917; #Settings: Make PIN scramble user specific + #repopick -i 320921; #Revert "Remove dependency on IME subtype from TSMS" sh "$DOS_SCRIPTS/Patch.sh"; sh "$DOS_SCRIPTS_COMMON/Enable_Verity.sh"; diff --git a/Scripts/init.sh b/Scripts/init.sh index 8c1fc8f6..184f4060 100644 --- a/Scripts/init.sh +++ b/Scripts/init.sh @@ -66,7 +66,7 @@ export DOS_MICROG_INCLUDED="NLP"; #Determines inclusion of microG. Options: NLP, export DOS_NON_COMMERCIAL_USE_PATCHES=false; #Set true to allow inclusion of non-commercial use patches XXX: Unused, see 1dc9247 export DOS_OPTIMIZE_IMAGES=false; #Set true to apply lossless optimizations to image resources export DOS_SENSORS_PERM=false; #Set true to provide a per-app sensors permission #XXX: can break things like camera -export DOS_SENSORS_PERM_NEW=true; +export DOS_SENSORS_PERM_NEW=false; export DOS_STRONG_ENCRYPTION_ENABLED=false; #Set true to enable AES 256-bit FDE encryption on 14.1+15.1 XXX: THIS WILL **DESTROY** EXISTING INSTALLS! export DOS_WEBVIEW_LFS=true; #Whether to `git lfs pull` in the WebView repository #alias DOS_WEBVIEW_CHERRYPICK='git pull "https://github.com/LineageOS/android_external_chromium-webview" refs/changes/00/316600/2'; diff --git a/TODO b/TODO index 061f30da..8d0bae67 100644 --- a/TODO +++ b/TODO @@ -1,4 +1,4 @@ -Last updated: 2021-04-12 +Last updated: 2021-12-31 High Priority Website @@ -14,15 +14,12 @@ Medium Priority - Various other branding (logo, snazzy bootanimation, setupwizard, etc.) Project - Database verification in Hypatia - - More cryptocurrency addresses Servers - - Dedicated build server + - Dedicated full-time build server Low Priority Website - Switch to a wiki (?) - WiFiDatabaseMerger - - Improved documentation Longterm Build