Commit Graph

59 Commits

Author SHA1 Message Date
Tad
0dde119d7e
20.0 June ASB work + churn
QPR3 is delayed a week now

Patches pulled from GrapheneOS and checked against CalyxOS

Signed-off-by: Tad <tad@spotco.us>
2023-06-12 21:06:42 -04:00
Tad
ffe020a7a0
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-06-07 18:01:35 -04:00
Tad
11d228c7c3
Switch CensurfriDNS to anycast domain
Signed-off-by: Tad <tad@spotco.us>
2023-06-05 15:47:21 -04:00
Tad
e696cceac9
20.0 Private DNS work
- Simplify Private DNS preset patchsets
  based on updated CalyxOS patchset
  TODO: backport this

- Add DoH endpoints for all of the presets
  Disabled, very few hosts actually support DoH/3

Signed-off-by: Tad <tad@spotco.us>
2023-05-31 19:02:10 -04:00
Tad
8a43be3c58
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-05-30 15:17:29 -04:00
Tad
14c191ffb5
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-05-04 21:19:33 -04:00
Tad
c544c28b94
Prevent Qualcomm location stack from reading chipset serial number
The deblobber already removes xtra-daemon which is what actually performs the requests.
This is just extra sanctity.

Signed-off-by: Tad <tad@spotco.us>
2023-05-03 21:41:20 -04:00
Tad
18f72663e8
Fix + churn
Signed-off-by: Tad <tad@spotco.us>
2023-04-25 02:03:40 -04:00
Tad
7263a6fd6e
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-04-17 12:27:05 -04:00
Tad
2cc87c4dc7
Switch fingerprint locked to 5 attempts instead of 3 + churn
Signed-off-by: Tad <tad@spotco.us>
2023-04-12 15:26:26 -04:00
Tad
332c469151
Silence some log spam
As repoted on FP3

Signed-off-by: Tad <tad@spotco.us>
2023-03-28 23:40:31 -04:00
Tad
c4a23756a5 Churn
Signed-off-by: Tad <tad@spotco.us>
2023-03-25 20:44:13 -04:00
Tad
b522a16298
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-03-22 07:21:15 -04:00
Tad
b4dbe27f23
Fixes
- 18.1: Fix exempted background tasks when dozing (GrapheneOS)
- 20.0: pick a fix for some colors after qpr2
- 20.0: fix the missing notification backdrop

Signed-off-by: Tad <tad@spotco.us>
2023-03-20 17:51:09 -04:00
Tad
9475615e77
A13 QPR2 Churn
Signed-off-by: Tad <tad@spotco.us>
2023-03-19 20:52:48 -04:00
Tad
7e3bbc174a
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-03-06 22:57:45 -05:00
danielk43
11039a156d Update LOS20 hardened_malloc patches 2023-02-27 10:10:41 -05:00
Tad
2993b459f0
Fixes
Signed-off-by: Tad <tad@spotco.us>
2023-02-18 23:53:28 -05:00
Tad
b08bf0356f
Small additions + churn
- 18.1+: Disable NTP fully when automatic time is off, credit GrapheneOS
- 20.0: Handle Tor-over-Orbot when killswitch enabled, credit CalyxOS, BROKEN

Signed-off-by: Tad <tad@spotco.us>
2023-02-18 13:52:46 -05:00
Tad
9f82763c53
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-02-17 23:57:04 -05:00
Tad
742a2fb7e2
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:32:56 -05:00
Tad
49f5f1c674
19.1+: Add the SUPL toggle setting from GrapheneOS
Will need some work to apply on 17.1/18.1

Signed-off-by: Tad <tad@spotco.us>
2023-02-10 23:57:04 -05:00
Tad
ef51b5e5af
Updated strict package check patches from GrapheneOS
Signed-off-by: Tad <tad@spotco.us>
2023-02-03 17:57:15 -05:00
Tad
3231979ef4
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-01-24 20:55:42 -05:00
Tad
fb7bf503b1
Pull in the special permissions reset bugfix from GrapheneOS
Signed-off-by: Tad <tad@spotco.us>
2023-01-24 19:20:00 -05:00
Tad
b1da856762
Cleanup
Signed-off-by: Tad <tad@spotco.us>
2023-01-24 19:14:26 -05:00
Tad
8abf9a0031
Finish e81cd558
Signed-off-by: Tad <tad@spotco.us>
2023-01-24 19:12:05 -05:00
Tad
e81cd5586d
Add even more captive portal servers + sorting
TODO: apply to other branches

Signed-off-by: Tad <tad@spotco.us>
2023-01-23 16:42:00 -05:00
Tad
a96d2221cd
Fix off-by one
Signed-off-by: Tad <tad@spotco.us>
2023-01-22 00:09:02 -05:00
Tad
9558a7d0e9 Switch to the Broadcom PSDS server for Pixel 6/7 series
Instead of agnss.goog cache
Based off of a patch from GrapheneOS

Signed-off-by: Tad <tad@spotco.us>
2023-01-21 04:08:26 -05:00
Tad
ad466bd3e4
Various changes
- 17.1: Add more captive portal server options like 18.1+, disabled: needs fixes
- 17.1: Add the hosts toggle like 18.1+
- 18.1: fix junk in patch
- 17.1+: hosts toggle: bugfix: fixup localhost handling by switching to strcmp
- 15.1: fixes to get hmalloc to compile, does NOT boot

Signed-off-by: Tad <tad@spotco.us>
2023-01-20 18:59:02 -05:00
Tad
84a9a1326c
18.1+: add multiple captive potal server options
This also switches 18.1 from @MSe1969's patch to the GrapheneOS patch
Can maybe port to 17.1 too

Signed-off-by: Tad <tad@spotco.us>
2023-01-20 00:21:30 -05:00
Tad
207bdd2406
Strict versionCode checks for system apps from GrapheneOS
Signed-off-by: Tad <tad@spotco.us>
2023-01-11 12:19:41 -05:00
Tad
7dbdcdf751 Tweak Aperture defaults
Signed-off-by: Tad <tad@spotco.us>
2023-01-08 21:20:36 -05:00
Tad
c92c084ca1
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-01-08 20:49:57 -05:00
Tad
06254708be
Many fixes to get bluejay booting & working proper
- Enable APEX for Pixel 6/7, necessary for camera and pKVM
  - Also drop hack removing pKVM for Pixel 6/7
  - patch from GrapheneOS

- Extend hmalloc workaround to /apex

- Deblobber:
  - actually handle wildcard f/w/b overlays
  - move some stuff around
  - remove some more Pixel blobs
  - flag and disable removal of camera extensions, being able to use the second camera is nice

- Adjust what hardenDefconfig disables, caused boot issues
  minimal impact as most of these are already default-disabled
  can be narrowed down in future

- Disable some of the bionic hardening patches, causing more boot issues
  annoying to lose, but having a phone that boots is more important

- Add LTE only mode to 17.1, 18.1, 19.1, and 20.0, credit GrapheneOS

- Remove Pixel 2 ramdisk compression reverts, fixed upstream

And yes, I know I should've split up this commit...

Signed-off-by: Tad <tad@spotco.us>
2022-12-25 13:21:37 -05:00
Tad
751d1e8d72
Misc patches
- 20.0: updated and enabled burnIn patch
- 19.1: fixup apps having data restrictions wrongly applied

Signed-off-by: Tad <tad@spotco.us>
2022-12-23 10:09:37 -05:00
Tad
29c9826c11
20.0: QPR1 churn
Signed-off-by: Tad <tad@spotco.us>
2022-12-10 20:57:17 -05:00
Tad
b78f573eb9
Fixes
Signed-off-by: Tad <tad@spotco.us>
2022-12-10 20:30:22 -05:00
Tad
ce47fdae34
Small updates + Picks
Signed-off-by: Tad <tad@spotco.us>
2022-12-07 18:41:50 -05:00
Tad
3c8c235758
Ugly workaround
For bug exposed after:
https://review.lineageos.org/c/LineageOS/android_frameworks_base/+/344890

Signed-off-by: Tad <tad@spotco.us>
2022-12-03 23:58:36 -05:00
Tad
178e127338
Small tweaks + churn
Fixes recovery not booting on 20.0

Signed-off-by: Tad <tad@spotco.us>
2022-12-03 16:19:31 -05:00
Tad
680bf51e05
Ugly hack
Signed-off-by: Tad <tad@spotco.us>
2022-11-22 07:24:21 -05:00
Tad
fd0e3e8117
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2022-11-22 07:11:30 -05:00
Tad
7f24df22f7 Small updates
Signed-off-by: Tad <tad@spotco.us>
2022-11-21 06:09:29 -05:00
Tad
14f7f1db32
Updates + Churn
Signed-off-by: Tad <tad@spotco.us>
2022-11-13 02:06:05 -05:00
Tad
807a08210a
Tweaks
- 20.0: pick fixes for the deny usb toggle
- 20.0: pull in a patch from GrapheneOS removing a package list leak

Signed-off-by: Tad <tad@spotco.us>
2022-11-07 20:30:36 -05:00
Tad
b9f4074226 20.0: disable the broken monet toggle patch
Has some weird inconsistencies

Signed-off-by: Tad <tad@spotco.us>
2022-11-03 14:49:28 -04:00
Tad
aa4ffdb014
20.0: add taimen/walleye
not stable yet, ims crashes invoking rescueparty

Signed-off-by: Tad <tad@spotco.us>
2022-10-31 18:31:55 -04:00
Tad
11780d890f Churn
Signed-off-by: Tad <tad@spotco.us>
2022-10-24 22:53:41 -04:00