Commit Graph

2040 Commits

Author SHA1 Message Date
Tad
4986da8250
16.0 December ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-12-11 23:21:23 -05:00
Tad
f18fb48d8a
17.1 December ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-12-11 20:39:36 -05:00
Tad
ba1e29a1b1
Reconcile picks
This gains one us patch: 376607

Signed-off-by: Tad <tad@spotco.us>
2023-12-11 18:59:08 -05:00
Tad
85aa8d153d
Fixup
Signed-off-by: Tad <tad@spotco.us>
2023-12-11 13:45:15 -05:00
Tad
533a2e69bb
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-12-11 13:42:18 -05:00
Tad
f20edeeb0c
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-12-09 21:28:26 -05:00
Tad
a3c17d356d
Fixup hotdog* compile
Signed-off-by: Tad <tad@spotco.us>
2023-12-08 21:03:58 -05:00
Tad
d7996e8240
14.1: December ASB picks
Signed-off-by: Tad <tad@spotco.us>
2023-12-07 00:07:02 -05:00
Tad
ee3e067016
Fixup
Signed-off-by: Tad <tad@spotco.us>
2023-12-06 23:53:44 -05:00
Tad
56aa41bf47
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-12-05 20:45:24 -05:00
Tad
26c0951cd2
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-12-04 15:51:53 -05:00
Tad
5c99bc4098
Picks
- 14.1: more ffmpeg patches from @syphyr
- 16.0: switch to @MSe1969's patchsets, gains 3 libcups related fixes

Signed-off-by: Tad <tad@spotco.us>
2023-12-03 19:08:52 -05:00
Tad
af0cea3572
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-11-16 22:59:28 -05:00
Tad
7717bb0369
Update picks
Signed-off-by: Tad <tad@spotco.us>
2023-11-16 22:30:53 -05:00
Tad
5a87cd6bcb
15.1 November ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-11-13 22:16:47 -05:00
Tad
ad298935a2
16.0 November ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-11-13 20:10:40 -05:00
Tad
c45a1db5e2
17.1 November ASB work
Plus a bonus October patch from @flamefire
https://github.com/Flamefire/android_device_sony_lilac/blob/lineage-17.1/patches/asb-2023-10/android_packages_providers_MediaProvider/0001-Fix-path-traversal-vulnerabilities-in-MediaProvider.patch

Signed-off-by: Tad <tad@spotco.us>
2023-11-13 16:25:48 -05:00
Tad
798c665f74
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-11-12 16:55:58 -05:00
Tad
78327ac864
19.1: restore vayu
20.0 vayu has no wi-fi like davinci

Signed-off-by: Tad <tad@spotco.us>
2023-11-12 15:45:29 -05:00
Tad
46c5c52393
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-11-11 00:00:32 -05:00
Tad
77b7de4b1e
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-11-09 17:59:22 -05:00
Tad
0b102adb1d
Final fixups
compile tested: h830, h850, rs988

Signed-off-by: Tad <tad@spotco.us>
2023-11-07 23:46:00 -05:00
Tad
4eed156d14
Fixup 09494a1c
compile tested: vayu, pioneer

Signed-off-by: Tad <tad@spotco.us>
2023-11-07 21:19:43 -05:00
Tad
acd2484816
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-11-07 17:37:16 -05:00
Tad
09494a1c71
Move all 19.1 devices to 20.0
Signed-off-by: Tad <tad@spotco.us>
2023-11-07 16:50:54 -05:00
Tad
01a196e055
Pull in Messaging notifications fix
Likely solves https://github.com/Divested-Mobile/DivestOS-Build/issues/141

Signed-off-by: Tad <tad@spotco.us>
2023-11-05 19:32:30 -05:00
Tad
548aec9c9d
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-11-05 18:58:11 -05:00
Tad
095d222e87
Add patch to allow disabling presidential broadcasts from GrapheneOS
Signed-off-by: Tad <tad@spotco.us>
2023-11-05 18:12:08 -05:00
Tad
01e41a26f6
19.1+: Reduce EXIF metadata in screenshots, thanks to CalyxOS
546fd13c6f

Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/263

Signed-off-by: Tad <tad@spotco.us>
2023-10-20 18:54:01 -04:00
Tad
90979e494c
Updater: point the changelog button to our news page
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/257

Signed-off-by: Tad <tad@spotco.us>
2023-10-20 18:44:05 -04:00
Tad
f64285f6fd
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-10-15 21:06:16 -04:00
Tad
03a2f65bb8
Don't trip rollback protection after October update
Signed-off-by: Tad <tad@spotco.us>
2023-10-13 04:58:44 -04:00
Tad
f2e48a04b5
Disable regdb updates
Last update broke wireless for Australian users
Let's use what is included instead

Signed-off-by: Tad <tad@spotco.us>
2023-10-13 02:24:26 -04:00
Tad
f5da93c4e5
15.1 October ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-10-09 22:02:07 -04:00
Tad
5d53945c3c
16.0 October ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-10-09 21:41:54 -04:00
Tad
27066c202f
17.1 October ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-10-09 19:41:44 -04:00
Tad
d90bcb8ad3
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-10-09 16:42:50 -04:00
Tad
bf565cd578
Switch to upstream ASB patchsets
Signed-off-by: Tad <tad@spotco.us>
2023-10-08 22:52:14 -04:00
Tad
7b54b4459c
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-10-08 15:10:59 -04:00
Tad
c05be35867
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-10-07 17:10:36 -04:00
Tad
781f2820de
14.1: October ASB picks
Signed-off-by: Tad <tad@spotco.us>
2023-10-05 16:35:36 -04:00
Tad
7bdcaac45d
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-10-03 17:45:51 -04:00
Tad
8ca9d55a57
Update commons
Signed-off-by: Tad <tad@spotco.us>
2023-10-03 15:33:07 -04:00
Tad
7d2c184d1f
Bonus patches
Signed-off-by: Tad <tad@spotco.us>
2023-10-03 15:17:06 -04:00
Tad
af360bc9ea
20.0: October ASB picks
wget c873988898.patch -O telecomm-01.patch
wget 0fb5786dbf.patch -O mediaprovider-01.patch
wget 1a4b9ef510.patch -O wifi-01.patch
wget 364a1d9962.patch -O bluetooth-01.patch
wget 87a06448b9.patch -O settings-01.patch
wget aaba724a68.patch -O settings-02.patch
wget 507304e1f5.patch -O native-01.patch
wget 89489ff5dd.patch -O base-01.patch
wget d1765c4715.patch -O base-02.patch
wget cbb1a0ecd6.patch -O base-03.patch
wget 4725772c0b.patch -O base-04.patch
wget 19747f6923.patch -O base-05.patch
wget e7a1aa9ed0.patch -O base-06.patch
wget 922a7860b1.patch -O base-07.patch
wget ed183ed912.patch -O base-08.patch
wget c6fbe1330a.patch -O base-09.patch
wget 9141cac175.patch -O base-10.patch
wget 41235bcc67.patch -O av-01.patch
wget a89f704701.patch -O av-02.patch
wget 6d7cd80d77.patch -O av-03.patch
wget 75fc175a08.patch -O av-04.patch
wget b023ec300f.patch -O av-05.patch
wget c8117d1539.patch -O av-06.patch
wget f06d23d824.patch -O av-07.patch
wget 9c7408ab07.patch -O av-08.patch
wget cfbfcefb3c.patch -O launcher-01.patch
wget 4a27a7f162.patch -O libxml-01.patch

Signed-off-by: Tad <tad@spotco.us>
2023-10-03 14:42:00 -04:00
Tad
d80f272b54
Update CVE patchers
CVE-2023-4128 replaces CVE-2023-4208

Signed-off-by: Tad <tad@spotco.us>
2023-10-02 21:41:34 -04:00
Tad
fcf4f812cc
CVE-2023-5217
untested

Signed-off-by: Tad <tad@spotco.us>
2023-09-28 09:17:29 -04:00
Tad
5250942b4b
Attempt to fix nile
Something changed between August 10th and September 6th update which broke boot
These are all the functional changes made to the kernel.
Rest were Xen or vmxnet related.
Other 4.9 to 4.4 replacements were double checked and ruled out.

Signed-off-by: Tad <tad@spotco.us>
2023-09-26 15:16:26 -04:00
Tad
4b47141bac
Update picks
You must still set pixel/android-13.0.0_r0.127 in .repo/manifests/snippets/pixel.xml

Signed-off-by: Tad <tad@spotco.us>
2023-09-25 15:14:52 -04:00
Tad
be9870b832
Fixup picks
Note to builders:
you must first pull in super/android-13.0.0_r75 and pixel/android-13.0.0_r0.127

Signed-off-by: Tad <tad@spotco.us>
2023-09-21 18:03:11 -04:00
Tad
19f4964036
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-09-21 16:52:35 -04:00
Tad
b39b2f2feb
Churn + Picks
Signed-off-by: Tad <tad@spotco.us>
2023-09-21 16:12:28 -04:00
Tad
25f02f4177
14.1 though 17.1: patch CVE-2023-4863, thanks to @syphyr
run tested on 14.1, 15.1, and 17.1
compile tested on 16.0

Signed-off-by: Tad <tad@spotco.us>
2023-09-20 04:16:17 -04:00
Tad
de7d2a2a62
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-09-19 01:53:33 -04:00
Tad
724b742b64
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-09-18 15:34:11 -04:00
Tad
337ae6012d
Fixup
TODO: regen

Signed-off-by: Tad <tad@spotco.us>
2023-09-17 20:26:44 -04:00
Tad
ab69e235dd
Update picks
Signed-off-by: Tad <tad@spotco.us>
2023-09-17 01:32:28 -04:00
Tad
968676650e
Update picks
Signed-off-by: Tad <tad@spotco.us>
2023-09-17 01:32:03 -04:00
Tad
1b4f6d3bd8
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-09-17 01:30:23 -04:00
Tad
cbf76ea4eb
18.1+: patch CVE-2023-4863
TODO:
- 17.1 uses v1.0.2, needs backport
  patch for v1.0.3: 8d9916da90

Signed-off-by: Tad <tad@spotco.us>
2023-09-15 14:38:14 -04:00
Tad
cbc5a339e6
20.0: LatinIME patches rebased by @danielk43
closes https://github.com/Divested-Mobile/DivestOS-Build/issues/244

Signed-off-by: Tad <tad@spotco.us>
2023-09-13 15:30:11 -04:00
Tad
5eb6190931
Fixup 15.1/16.0 backport: system/bt: Fix UAF in gatt_cl.cc
thanks to @syphyr for this!

Signed-off-by: Tad <tad@spotco.us>
2023-09-12 16:55:46 -04:00
Tad
3aa7e02455
15.1 September ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-09-11 20:09:30 -04:00
Tad
51b28e6cdf
Fixup
Signed-off-by: Tad <tad@spotco.us>
2023-09-11 17:24:48 -04:00
Tad
033c600eac
16.0 September ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-09-11 16:14:15 -04:00
Tad
aa4464d1c4
17.1 September ASB work
+ an August backport from @flamefire

Signed-off-by: Tad <tad@spotco.us>
2023-09-11 01:23:37 -04:00
Tad
84a84c4742
Picks + Churn
Signed-off-by: Tad <tad@spotco.us>
2023-09-10 21:12:24 -04:00
Tad
6e5745143f
Picks
Signed-off-by: Tad <tad@spotco.us>
2023-09-08 20:00:23 -04:00
Tad
b0800a1479
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-09-07 21:23:50 -04:00
Tad
964877bbf6
20.0: September ASB picks
wget b96ee4a2d1.patch -O telephony-01.patch
wget c16e6e78c1.patch -O media-01.patch
wget d5771450d7.patch -O media-02.patch
wget a1370bd00c.patch -O nn-01.patch
wget ce2776f4ca.patch -O bt-01.patch
wget 585f583ef5.patch -O bt-02.patch
wget c9905e7968.patch -O bt-03.patch
wget c93ec045f5.patch -O bt-04.patch
wget 89fb17d172.patch -O bt-05.patch
wget 14aed2455e.patch -O bt-06.patch
wget cd438ebc52.patch -O bt-07.patch
wget 27e7cdc4e5.patch -O nfc-01.patch
wget dfeb4270b8.patch -O launcher-01.patch
wget b1993f6cec.patch -O native-01.patch
wget df4a9362cd.patch -O fwb-01.patch
wget b55563bb9d.patch -O fwb-02.patch
wget a80971a281.patch -O fwb-03.patch
wget 7e173b4383.patch -O fwb-04.patch
wget 44191b1c6b.patch -O fwb-05.patch
wget 8dc8dfe572.patch -O fwb-06.patch
wget 00a4224100.patch -O av-01.patch
wget 21623d1f43.patch -O settings-01.patch
wget fa5ec443d9.patch -O settings-02.patch
wget ba4da9c7b3.patch -O settings-03.patch

Signed-off-by: Tad <tad@spotco.us>
2023-09-06 15:42:52 -04:00
Tad
3e8effa345
ASB cherrypicks
https://review.lineageos.org/q/topic:%22n-asb-2023-09%22

Signed-off-by: Tad <tad@spotco.us>
2023-09-05 20:50:36 -04:00
Tad
0ec3c25d86
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-09-05 20:42:14 -04:00
Tad
ababe54a0c
14.1: Disable dexpreopt
causes many bizarre issues on devices
- apps crashing on certain functions
- apps loading content from other apps
- etc.

Signed-off-by: Tad <tad@spotco.us>
2023-09-04 15:36:57 -04:00
Tad
efaf13b03c
17.1: restore davinci for now
wifi isn't working on 20.0

Signed-off-by: Tad <tad@spotco.us>
2023-09-04 14:21:44 -04:00
Tad
de3ba78ac7
Unbreak athene
Signed-off-by: Tad <tad@spotco.us>
2023-09-04 14:18:32 -04:00
Tad
a17a425265
14.1: Fixup Freetype
90b7894627

Signed-off-by: Tad <tad@spotco.us>
2023-09-03 17:36:24 -04:00
Tad
6222ce9ee9
Adjust deblob
- Put face unlock on a flag
- Don't remove the (non-executable) files for Google Camera to silence complaints

Signed-off-by: Tad <tad@spotco.us>
2023-09-02 10:29:00 -04:00
Tad
9e954ea987
Restore face unlock for Pixel 4 series
We keep fingerprint reader blobs, so why not these?

Signed-off-by: Tad <tad@spotco.us>
2023-09-01 20:51:49 -04:00
Tad
ca83e7bc40
Unbreak
Signed-off-by: Tad <tad@spotco.us>
2023-08-31 22:40:38 -04:00
Tad
6d52d2f6ce
m8: Fix display corruption
Fixes the screen shifting vertically when in a full screen task like camera

Signed-off-by: Tad <tad@spotco.us>
2023-08-31 21:55:13 -04:00
Tad
56b71651c5
Tweak
Signed-off-by: Tad <tad@spotco.us>
2023-08-30 15:22:00 -04:00
Tad
4afb99b6d1
Fixup fc903251
Signed-off-by: Tad <tad@spotco.us>
2023-08-30 12:48:37 -04:00
Tad
8acec36989 20.0: eUICC for all
TODO: move this setting to the cell menu

Signed-off-by: Tad <tad@spotco.us>
2023-08-30 12:41:30 -04:00
Tad
f7d0ff4af2
Fixup athene
- Disable default encryption on athene, doesn't work
- Remove QC telephony extensions, causes Dialer to crash

Signed-off-by: Tad <tad@spotco.us>
2023-08-29 23:34:49 -04:00
Tad
e067f59555
14.1: add athene
tried to buy a harpia, ended up with an athene :(

Signed-off-by: Tad <tad@spotco.us>
2023-08-29 21:55:15 -04:00
Tad
fc9032513f
Update CVE patchers
Likely issue CVE-2023-3773/^6.4

Signed-off-by: Tad <tad@spotco.us>
2023-08-27 17:13:53 -04:00
Tad
f9afe6f862
Really unbreak Pixel 4 camera, by not removing Motion Sense blobs
Signed-off-by: Tad <tad@spotco.us>
2023-08-26 21:38:22 -04:00
Tad
bf55f7d572
Remove more face unlock blobs and unbreak camera on Pixel 4 series
Signed-off-by: Tad <tad@spotco.us>
2023-08-26 18:22:51 -04:00
Tad
48b3276140
Fixup kebab and lemonades
Signed-off-by: Tad <tad@spotco.us>
2023-08-25 19:43:21 -04:00
Tad
52fde9a0e7
Fixup
Signed-off-by: Tad <tad@spotco.us>
2023-08-25 15:36:12 -04:00
Tad
7509afb74d
20.0: add Mi8917
Signed-off-by: Tad <tad@spotco.us>
2023-08-25 14:47:54 -04:00
Tad
aa0ab3c1ba
Revert "Try to fixup cell service on crackling"
didn't work

This reverts commit 43e55668fd.
2023-08-25 09:56:20 -04:00
Tad
0f127cfcc8
Update defconfigs
Signed-off-by: Tad <tad@spotco.us>
2023-08-25 09:27:01 -04:00
Tad
fa030fcbf4
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-08-24 21:38:33 -04:00
Alberto García
62ca909711
Push davinci to 20.0 2023-08-24 19:06:22 -04:00
Tad
ee5a62138a
Push z2_plus to 20.0
Signed-off-by: Tad <tad@spotco.us>
2023-08-24 18:58:08 -04:00
Tad
52a0c55c41
Fixups
- Revert Freetype branch switching for 15.1+, broken
- Don't include OpenEUICC on Pixel 2 and 3 series, they won't work
- Churn

Signed-off-by: Tad <tad@spotco.us>
2023-08-24 03:06:02 -04:00
Tad
1fde0f9c45
More branch switching, thanks to @syphyr
Signed-off-by: Tad <tad@spotco.us>
2023-08-23 11:05:05 -04:00
Tad
7835c2b2ae
18.1+: Restrict tile usage when locked, credit @GrapheneOS
TODO: backport to older branches

Signed-off-by: Tad <tad@spotco.us>
2023-08-22 17:54:19 -04:00
Tad
8b51c3cd0f
Fixup OpenEUICC inclusion
Signed-off-by: Tad <tad@spotco.us>
2023-08-21 20:00:31 -04:00
Tad
d6c3b6c8fa
More eSIM work
- Add the GrapheneOS package hook mechanism
- Ensure OpenEUICC and EuiccSupportPixel are only enabled in the system user
- Prevent EuiccSupportPixel interactions
- Remove INTERNET permission from EuiccSupportPixel

Signed-off-by: Tad <tad@spotco.us>
2023-08-21 16:50:51 -04:00
Tad
c070e856b2
eSIM enablement via @PeterCxy's OpenEUICC
tested working on bluejay

Signed-off-by: Tad <tad@spotco.us>
2023-08-21 09:25:10 -04:00
Tad
c90920965f
Remove some garbage
Signed-off-by: Tad <tad@spotco.us>
2023-08-20 16:11:44 -04:00
Tad
d34d676805
Fixup removal of DebuggingRestrictionController
Signed-off-by: Tad <tad@spotco.us>
2023-08-20 15:18:21 -04:00
Tad
7fb56809ac
Small fixups
Signed-off-by: Tad <tad@spotco.us>
2023-08-18 16:08:10 -04:00
Tad
0afe05ff22
Push apollon to 20.0
Signed-off-by: Tad <tad@spotco.us>
2023-08-18 12:36:18 -04:00
Tad
7ad46d58f1
Switch to @syphyr's security backport branches
Signed-off-by: Tad <tad@spotco.us>
2023-08-18 11:34:39 -04:00
Tad
43e55668fd
Try to fixup cell service on crackling
netmgrd appears incompatible with hmalloc
noted by @fishy1337
https://github.com/Divested-Mobile/DivestOS-Build/issues/204#issuecomment-1676439970

Signed-off-by: Tad <tad@spotco.us>
2023-08-18 11:24:04 -04:00
Tad
ceec1584a9
Fixup hosts cache thanks to patch from @danielk43
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/198

Signed-off-by: Tad <tad@spotco.us>
2023-08-18 11:17:14 -04:00
Tad
1485be072d
Notes
Signed-off-by: Tad <tad@spotco.us>
2023-08-18 10:59:06 -04:00
Tad
2142e2e763
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-08-17 17:18:10 -04:00
Tad
9707326c4f
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-08-13 16:16:21 -04:00
Tad
160aee5049
Backport patch to handle verity with openssl 3.0
ref: https://github.com/Divested-Mobile/DivestOS-Website/pull/19

Signed-off-by: Tad <tad@spotco.us>
2023-08-11 18:53:01 -04:00
Tad
974878988b
Fixup
Will regen later

Signed-off-by: Tad <tad@spotco.us>
2023-08-09 00:46:44 -04:00
Tad
51bcf23dac
14.1 August ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 23:41:40 -04:00
Tad
79e3fb6fb4
15.1 August ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 09:35:44 -04:00
Tad
4b2160cf56
16.0 August ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 07:48:57 -04:00
Tad
f52adb2bc5
17.1 August ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 06:31:22 -04:00
Tad
566decb5dd
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 05:14:44 -04:00
Tad
067c50a81d
Cherrypicks
ca-cert picks are ignored as we already use the mainline repo

Signed-off-by: Tad <tad@spotco.us>
2023-08-08 05:05:34 -04:00
Tad
e627cdee05
Sync with @flamefire's Q_asb_2023-07
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 05:01:00 -04:00
Tad
eef09ae519
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-08-07 18:07:19 -04:00
Tad
7ef5d9a9c4
Broken EUICC handling
Signed-off-by: Tad <tad@spotco.us>
2023-08-05 18:57:32 -04:00
Tad
180280b233
Update CVE patchers
TODO: adjust min version of CVE-2023-4132

Signed-off-by: Tad <tad@spotco.us>
2023-08-04 21:00:29 -04:00
Tad
7cbceb9d81
Tweaks
Signed-off-by: Tad <tad@spotco.us>
2023-07-27 20:44:56 -04:00
Tad
c777c74717 16.0 Backports
- hosts toggle
- auto reboot
- bluetooth timeout
- unprivileged microG
- ptrace toggle
- exec spawning toggle

TODO: needs work

Signed-off-by: Tad <tad@spotco.us>
2023-07-27 16:35:00 -04:00
Tad
7b7d5b93dd
Adjust
Signed-off-by: Tad <tad@spotco.us>
2023-07-27 13:43:06 -04:00
Tad
73414e76d2
Update CVE patchers
two lpes

Signed-off-by: Tad <tad@spotco.us>
2023-07-25 12:04:05 -04:00
Tad
bdc6f0dff7
Tweak
Signed-off-by: Tad <tad@spotco.us>
2023-07-25 10:59:22 -04:00
Tad
c8d3354113
Patch from CalyxOS to make AOSP less spyware
Signed-off-by: Tad <tad@spotco.us>
2023-07-24 14:35:24 -04:00
Tad
3708cee48a
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-24 14:10:33 -04:00
Tad
e74f861c8e
Fixes + Churn
- Fix instances of awk failing on missing globs
- Remove unwanted packages from work/user/managed profiles
- Remove proprietary camera extensions

Signed-off-by: Tad <tad@spotco.us>
2023-07-24 03:59:51 -04:00
Tad
05bb9b039b
18.1: add debx
Signed-off-by: Tad <tad@spotco.us>
2023-07-22 19:20:39 -04:00
Tad
e408e7e19a
Drop devices with newer versions available
14.1: clark
15.1: deb, flo, hammerhead, shamu, ether
16.0: hammerhead
19.1: alioth

Signed-off-by: Tad <tad@spotco.us>
2023-07-22 19:17:42 -04:00
Tad
fbf6058e65
18.1: unofficial hammerhead bringup by @z3DD3r
not broken like 16.0 and way more updated than 15.1

Signed-off-by: Tad <tad@spotco.us>
2023-07-22 19:06:23 -04:00
Tad
7cf9292553
19.1: Restore GOS camera, accidentally removed
Signed-off-by: Tad <tad@spotco.us>
2023-07-22 14:34:10 -04:00
Tad
4bab1c31d7
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-19 16:05:51 -04:00
Tad
af57c5c857
Tweaks
Signed-off-by: Tad <tad@spotco.us>
2023-07-19 04:43:13 -04:00
Tad
0f9a2c7aea
Less aggressive low_ram enablement
14.1 <2GB
15.1 <2GB
16.0 <2GB
17.1 <3GB
18.1 <3GB
19.1 <4GB
20.0 <4GB

Signed-off-by: Tad <tad@spotco.us>
2023-07-17 18:44:56 -04:00
Tad
b6308caa37
Update CVE patchers
TODO: enable CVE-2023-31084/4.4

Signed-off-by: Tad <tad@spotco.us>
2023-07-15 21:22:18 -04:00
Tad
aa6bfad801
Various
- Drop OpenCamera, it doesn't work on lock screens anymore?
- microG on 18.1+:
  - set packages forceQueryable
  - spoof some sources as Play Store
    TODO: backport this to 17.1
- Remove camera extensions
- Churn
- Wording

Signed-off-by: Tad <tad@spotco.us>
2023-07-15 18:22:07 -04:00
Tad
e705bac150
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-14 20:34:51 -04:00
Tad
1c9076fffe
KSM tuning
- Only enable on Linux 3.0 through 4.9
- Always enable defer option
- Only run twice a second, instead of fifty times a second

Signed-off-by: Tad <tad@spotco.us>
2023-07-14 20:27:10 -04:00
Tad
11c286ecd4
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-14 17:27:20 -04:00
Tad
192c73146a
Add a toggle for KSM
Signed-off-by: Tad <tad@spotco.us>
2023-07-14 17:11:21 -04:00
Tad
15de8ed2e8
Expand the low_ram coverage
As follows
14.1 <3GB
15.1 <3GB
16.0 <3GB
17.1 <3GB
18.1 <4GB
19.1 <6GB
20.0 <6GB

Signed-off-by: Tad <tad@spotco.us>
2023-07-13 18:31:03 -04:00
Tad
b5bb498248
Many tweaks
- 19.1/20.0: Enable low ram for <6GB devices
- 20.0: support RROs with exec spawning patch from GrapheneOS
- allow work profiles when low ram is enabled
- churn
- cherrypicks

Signed-off-by: Tad <tad@spotco.us>
2023-07-13 16:40:05 -04:00
Tad
eff7a69bed
Small changes
- Another fix
- Deblobber tweaks
- Patch from GrapheneOS
- Cherrypick

Signed-off-by: Tad <tad@spotco.us>
2023-07-13 10:58:41 -04:00
Tad
5f6a176e8c
Fixup 89424768
Signed-off-by: Tad <tad@spotco.us>
2023-07-13 10:39:34 -04:00
Tad
894247687a
Fixup 492ba67d
It'd still error on a device that didn't support deltas

Signed-off-by: Tad <tad@spotco.us>
2023-07-13 10:37:19 -04:00
steadfasterX
492ba67d37 fix an issue when no delta requested
this one will break the build when using https://github.com/Divested-Mobile/DivestOS-Build/pull/206 :

> rename: /ssd/tmp/dos/hotdog/LineageOS-20.0/release_keys//incrementals/xxxx-20.0-20230713-dos-hotdog-incremental_*.zip*: not accessible: No such file or directory

the next one is a cosmetic thing only. while the current implementation does not break the build I prefer skipping it if not needed at all instead of just the `|| true`  workaround.
"fixes" the message in build output when no delta is requested:

> cp: cannot stat 'xxxx-20.0-20230713-dos-hotdog-incremental_*.zip*': No such file or directory

Signed-off-by: steadfasterX <steadfasterX@users.noreply.github.com>
2023-07-13 13:58:53 +00:00
Tad
fdeceb5c9c
Fixups
Signed-off-by: Tad <tad@spotco.us>
2023-07-10 22:50:33 -04:00
Tad
7a53edc390
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-10 17:11:15 -04:00
Tad
f699e1bc86
A-GPS: disable LPP and LPPE
also handle cases in variables

Signed-off-by: Tad <tad@spotco.us>
2023-07-09 23:59:06 -04:00
Tad
fc01bcba7f
Churn
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/222

Signed-off-by: Tad <tad@spotco.us>
2023-07-09 21:23:25 -04:00
Tad
ad8e5b631a
16.0+17.1: Extra July ASB backport from @MSe1969
Signed-off-by: Tad <tad@spotco.us>
2023-07-09 14:49:51 -04:00
Tad
83cbcfa39b
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-07-08 15:21:06 -04:00
Tad
9d6662dee7
15.1 July ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 18:00:23 -04:00
Tad
293f97d678
16.0 July ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 17:24:47 -04:00
Tad
4db68c3de1
Fixup b92655da
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 15:28:55 -04:00
Tad
b92655dac4
17.1 July ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 14:17:23 -04:00
Tad
2651f33e5c
ASB cherrypicks
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 13:44:00 -04:00
Tad
492ed24ca2
Fixups
Signed-off-by: Tad <tad@spotco.us>
2023-07-06 17:59:25 -04:00
Tad
a1a3cbb94e
Fix overlay conflicts
Should mostly fix https://github.com/Divested-Mobile/DivestOS-Build/issues/219

Signed-off-by: Tad <tad@spotco.us>
2023-07-06 14:51:40 -04:00
Tad
c4666a33b7
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-07-05 19:42:40 -04:00
Tad
a96f74ca28
Enable the opt-in unprivileged microG enablement patchset
Runtime tested: 17.1, 18.1, 20.0
Compile tested: 19.1

Signed-off-by: Tad <tad@spotco.us>
2023-07-03 21:50:08 -04:00
Tad
b7d37053c3
Further harden signature spoofing with targetSdk and versionCode checks
- Also fix compile for 17.1, rest should be fine

Signed-off-by: Tad <tad@spotco.us>
2023-07-03 17:33:34 -04:00
Tad
f2c8005853
16.0: switch to upstream P_asb_2023-06
Has two extra patches for Traceur, but misses a patch for CarSettings

Signed-off-by: Tad <tad@spotco.us>
2023-07-03 15:22:32 -04:00
Tad
4282c7c35f
Backports of 0f4044e2 to 17.1/18.1/19.1
Also don't grant any special location permissions

Signed-off-by: Tad <tad@spotco.us>
2023-07-03 15:17:56 -04:00
Tad
0f4044e242
20.0: opt-in hardened unprivileged microG ability
Unlike other systems which ship privileged microG out of the box:
- User must enable microG repo in F-Droid
- User must install official microG apps (GmsCore/FakeStore/GSF)
- User must enable the microG toggle in Settings
- NOT a privileged app, not all features will work
- gmscore SELinux domain is still disabled

Signed-off-by: Tad <tad@spotco.us>
2023-07-03 13:45:06 -04:00
Tad
2e2ac4557d
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-06-26 19:41:11 -04:00
Tad
0327a627cd
Ensure fastboot.zip is generated if necessary
As dtbo is necessary on avicii, hotdog, hotdogb, instantnoodle, instantnoodlep, kebab, lemonades, pro1x
Which all don't currently have a fastboo.zip provided

Signed-off-by: Tad <tad@spotco.us>
2023-06-26 15:37:28 -04:00
Tad
6b94c8cdcb
Fixup
Signed-off-by: Tad <tad@spotco.us>
2023-06-21 16:05:11 -04:00
Tad
dc4d6b0901
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-06-20 18:36:31 -04:00
Tad
1e7f10d6b6
20.0: drop June ASB patches
QPR3 has been merged

Signed-off-by: Tad <tad@spotco.us>
2023-06-20 16:22:02 -04:00
Tad
0bc93038ac
Cleanup
Signed-off-by: Tad <tad@spotco.us>
2023-06-18 20:35:34 -04:00
Tad
cda898f141
Certificate Authority store updates
- Remove some untrustworthy CAs
- Update CA store for all branches to aosp/e302aa968334b3c3fc9cd709a7c7661e0cf534eb

Signed-off-by: Tad <tad@spotco.us>
2023-06-17 15:13:54 -04:00
Tad
41e2669884
17.1: switch to flamefire's ASB topics
This gets us ~9 extra patches

Signed-off-by: Tad <tad@spotco.us>
2023-06-17 15:13:46 -04:00
Tad
a07133a064
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-06-16 11:03:46 -04:00
Tad
ee534ada7f
20.0: bringup lmi/alioth
Signed-off-by: Tad <tad@spotco.us>
2023-06-14 22:04:04 -04:00
Tad
7ed06bc763
Remove charge control feature from all devices for now
Signed-off-by: Tad <tad@spotco.us>
2023-06-14 01:52:58 -04:00
Tad
0dde119d7e
20.0 June ASB work + churn
QPR3 is delayed a week now

Patches pulled from GrapheneOS and checked against CalyxOS

Signed-off-by: Tad <tad@spotco.us>
2023-06-12 21:06:42 -04:00
Tad
8c7f3daa00
15.1+16.0 June ASB work
Signed-off-by: Tad <tad@spotco.us>
2023-06-10 05:16:45 -04:00
Tad
ab52996e4f
16.0: switch to upstream topic for May ASB patches
They're identical
I'll likely eventually pull them back in anyway

Signed-off-by: Tad <tad@spotco.us>
2023-06-10 01:57:59 -04:00
Tad
67dd049bf6
17.1 June ASB work
Note: 358555 is prone to mismerge

Signed-off-by: Tad <tad@spotco.us>
2023-06-09 23:42:54 -04:00
Tad
e7b390d7e6
Picks
https://review.lineageos.org/q/topic:%22n-asb-2023-06%22

Signed-off-by: Tad <tad@spotco.us>
2023-06-09 21:59:53 -04:00
Tad
78fa476749
Churn + Fixes
Signed-off-by: Tad <tad@spotco.us>
2023-06-09 16:19:07 -04:00
Tad
04b4a1a45f
Picks + Churn
Signed-off-by: Tad <tad@spotco.us>
2023-06-08 22:48:40 -04:00
Tad
2ee99fe3ef
Update CVE patchers
CVE-2020-36694 appears to be a duplicate of CVE-2021-29650

Signed-off-by: Tad <tad@spotco.us>
2023-06-01 21:12:08 -04:00
Tad
e696cceac9
20.0 Private DNS work
- Simplify Private DNS preset patchsets
  based on updated CalyxOS patchset
  TODO: backport this

- Add DoH endpoints for all of the presets
  Disabled, very few hosts actually support DoH/3

Signed-off-by: Tad <tad@spotco.us>
2023-05-31 19:02:10 -04:00
Tad
8a43be3c58
Churn
Signed-off-by: Tad <tad@spotco.us>
2023-05-30 15:17:29 -04:00
Tad
59bda0360e
Fixes
Signed-off-by: Tad <tad@spotco.us>
2023-05-30 13:59:28 -04:00
Tad
0f04da8872
Pin + cleanup
Signed-off-by: Tad <tad@spotco.us>
2023-05-26 13:05:38 -04:00
Tad
5aa8f42e7a
Update commons
Signed-off-by: Tad <tad@spotco.us>
2023-05-24 11:08:49 -04:00
Tad
8463705798
Update CVE patchers
- Includes CVE-2023-32233 fixes for more devices
- Upstream has reverted the LVT patches, maybe consider handling them

Signed-off-by: Tad <tad@spotco.us>
2023-05-22 20:33:47 -04:00
Tad
289d01c66e
m8: artifacting workaround
Signed-off-by: Tad <tad@spotco.us>
2023-05-19 12:45:16 -04:00
Tad
931be971b9
volteOverride: we don't care about video calling
Signed-off-by: Tad <tad@spotco.us>
2023-05-19 12:26:16 -04:00
Tad
71c169d326
Promote LGE G5, G6, and V20 to 19.1
Signed-off-by: Tad <tad@spotco.us>
2023-05-17 02:52:11 -04:00
Tad
cd0a29d69b
Update CVE patchers
Signed-off-by: Tad <tad@spotco.us>
2023-05-12 23:28:44 -04:00
Tad
09768ac79b
Tweak
I don't like hearing the WRRRRRRRRRRRRRRRRRRRRRRRRR of the fans and drives in my nas spinning up every time a build finishes

Signed-off-by: Tad <tad@spotco.us>
2023-05-12 21:43:27 -04:00