11 Commits

Author	SHA1	Message	Date
Tad	d53a4f4e41	Update CVE patchers ... - Drop tcp_sack=0 sysctl, as most devices are now patched	2020-10-12 18:38:07 -04:00
Tad	f5462dd23c	Minor tweaks	2020-05-13 17:38:39 -04:00
Tad	057bedb65b	Minor tweaks ... - 14.1+15.1+16.0: enable kernel protections for files - protected_*: hardlinks, symlinks, fifos, regular - from GrapheneOS - defconfig: enable more verity options - cleanup	2019-08-28 20:24:59 -04:00
Tad	6458d6785f	Enable IPv6 privacy extensions	2019-07-05 16:47:59 -04:00
Tad	c15105d945	Update CVE patchers	2019-06-17 23:26:38 -04:00
Tad	afe719ffc4	16.0: Initial bringup ... - 14.1/15.1: Remove @ValdikSS' bluetooth patches - 15.1: Cleanup	2019-03-04 02:45:54 -05:00
Tad	1dc92478ed	Many changes ... - Drop Copperhead patches - More overlay work	2018-07-12 22:05:02 -04:00
Tad	f122ccb9f1	Many changes ... - Disable patches with restrictive licenses by default - Update LICENSE - Fixup the fix for F-Droid building - 15.1: Fix forceencrypt on mako - 15.1: Fix crashes when accessing factory reset and development settings menus on devices without support for factory reset protection or oem unlocking	2018-04-23 15:42:27 -04:00
Tad	28600556b4	Many changes ... - Add a variable to control inclusion of patches under a restrictive license - Fix F-Droid building - Add a buildDeviceDebug function that disables signing - Misc tweaks/cleanup - 15.1: Revert trust_interface cherry picks until official	2018-04-23 08:44:50 -04:00
Tad	f041047983	15.1: Initial deny new usb support from CopperheadOS ... This is an extremely powerful security feature with minimal downsides. Original credit goes to Grsecurity Android port goes to Copperhead	2018-04-22 11:35:56 -04:00
Tad	96edc2acc6	15.1: Much more work on rebase	2018-02-12 03:43:26 -05:00