Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,003 Commits 1 Branch 0 Tags 101 MiB
7ad46d58f1
Commit Graph

1784 Commits

Author SHA1 Message Date
Tad
9475615e77
A13 QPR2 Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-19 20:52:48 -04:00
Tad
ec38522af9
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-18 20:52:59 -04:00
Tad
d261ab1107
Updates 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-17 19:27:37 -04:00
Tad
8bcb5c734d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-17 19:27:22 -04:00
Tad
38626e1b0c
Picks + Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-14 16:58:27 -04:00
Tad
162b40a39d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-13 18:13:54 -04:00
Tad
3d55a90d4e
Tiny "fix" 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-10 17:51:04 -05:00
Tad
13865bc776
Fixup avicii 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 17:58:48 -05:00
Tad
fd1becb8c4
20.0: bringup avicii 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 17:29:58 -05:00
Tad
ef2fdb1d3e
More handling improvements 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 16:14:51 -05:00
Tad
0b294c1601
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 16:01:49 -05:00
Tad
5d0ab40f0b
Robustness improvements 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 01:14:06 -05:00
Tad
6ba784ac33
Some actual error handling 1/n 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 00:03:23 -05:00
Tad
097019193e
Don't bail when devices are missing 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-07 23:41:27 -05:00
Tad
7e3bbc174a
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-06 22:57:45 -05:00
Tad
9c6087f4a8
Update commons 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-06 20:39:36 -05:00
Tad
804786aa23
Update CVE patchers 
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/193

Signed-off-by: Tad <tad@spotco.us>
 2023-03-06 19:54:15 -05:00
Tad
b388727945
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-27 10:12:12 -05:00
Tad
b8f39716f1
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-26 12:21:36 -05:00
Tad
2706fc9d59
Missing pick 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-19 15:37:16 -05:00
Tad
b2913e8170
15.1 February ASB work + Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-19 13:07:11 -05:00
Tad
2993b459f0
Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-18 23:53:28 -05:00
Tad
b08bf0356f
Small additions + churn 
- 18.1+: Disable NTP fully when automatic time is off, credit GrapheneOS
- 20.0: Handle Tor-over-Orbot when killswitch enabled, credit CalyxOS, BROKEN

Signed-off-by: Tad <tad@spotco.us>
 2023-02-18 13:52:46 -05:00
Tad
9f82763c53
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-17 23:57:04 -05:00
Tad
742a2fb7e2
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-13 10:32:56 -05:00
Tad
29ef757ac6
Bump FP3 to 20.0 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-13 10:07:47 -05:00
Tad
e9f58cfd3c
VPN fixes 
Some devices still don't have these in 2023
https://gitlab.com/LineageOS/issues/android/-/issues/2193

Note, the following still aren't patched:
15.1
kernel/google/msm
kernel/lge/hammerhead

16.0
kernel/cyanogen/msm8974
kernel/lge/hammerhead

18.1
kernel/motorola/msm8974

Signed-off-by: Tad <tad@spotco.us>
 2023-02-12 21:34:23 -05:00
Tad
a845f59546
Fixup persistent IPv6 privacy address issue + churn 
Backports of rfc4941bis from Google/Linaro
and workaround for legacy kernels from GrapheneOS

already has rfc4941bis patch:
fairphone_sdm632
google_gs101
google_gs201
google_msm-4.14
google_msm-4.9
google_redbull
oneplus_sdm845
razer_sdm845
xiaomi_sdm845

Signed-off-by: Tad <tad@spotco.us>
 2023-02-11 20:26:24 -05:00
Tad
62b2318078 Backports + Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-11 19:20:28 -05:00
Tad
49f5f1c674
19.1+: Add the SUPL toggle setting from GrapheneOS 
Will need some work to apply on 17.1/18.1

Signed-off-by: Tad <tad@spotco.us>
 2023-02-10 23:57:04 -05:00
Tad
3047b3b269
Fixup kipper & starlte 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-10 08:19:23 -05:00
Tad
0e9599af6d
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-09 22:46:42 -05:00
Tad
046f35c66c
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-08 15:00:42 -05:00
Tad
fa067a3f89
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-06 23:06:34 -05:00
Tad
19d5f73b50
Remove silly carrier restrictions 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-03 22:17:13 -05:00
Tad
ef51b5e5af
Updated strict package check patches from GrapheneOS 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-03 17:57:15 -05:00
Tad
dc853bfdae
WebView: Switch to dedicated package name 
And remove the F-Droid repo for it, will be moved to the 'DivestOS Official' repo
This simplifies release management and also allows other systems to benefit from the repo

Downside is users who don't update to this build won't receive any updates for it anymore

Signed-off-by: Tad <tad@spotco.us>
 2023-02-02 17:17:30 -05:00
Tad
48ce0ad7d9 Fixup + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 21:36:47 -05:00
Tad
64e717151a
19.1: mata: allow major upgrade 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 20:25:47 -05:00
Tad
20c4e75fe1
Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 18:30:29 -05:00
Tad
4155cec7e3
20.0: bringup mata 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 17:51:38 -05:00
Tad
baa0252c6b
Allow editing APNs, patch from GrapheneOS 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 17:21:32 -05:00
Tad
4f6e21d7f9 Deduplicate Defaults.sh 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 15:57:13 -05:00
Tad
af3fe9776b Small updates 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-01 15:19:21 -05:00
Tad
1511176a07
Update CVE patchers 
Maybe some breakage

Signed-off-by: Tad <tad@spotco.us>
 2023-01-28 20:33:44 -05:00
Tad
eaac744701 Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-24 23:37:38 -05:00
Tad
3231979ef4
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-24 20:55:42 -05:00
Tad
fb7bf503b1
Pull in the special permissions reset bugfix from GrapheneOS 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-24 19:20:00 -05:00
Tad
b1da856762
Cleanup 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-24 19:14:26 -05:00
Tad
da1df44c8f
GrapheneOS kernel hardening patches update 
Maybe some compile breakage

Signed-off-by: Tad <tad@spotco.us>
 2023-01-24 19:03:01 -05:00
Tad
e81cd5586d
Add even more captive portal servers + sorting 
TODO: apply to other branches

Signed-off-by: Tad <tad@spotco.us>
 2023-01-23 16:42:00 -05:00
Tad
2529515b33
19.1+: Fixup DHCP hostname handling 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-22 15:52:20 -05:00
Tad
9558a7d0e9 Switch to the Broadcom PSDS server for Pixel 6/7 series 
Instead of agnss.goog cache
Based off of a patch from GrapheneOS

Signed-off-by: Tad <tad@spotco.us>
 2023-01-21 04:08:26 -05:00
Tad
626821d12d
Use HTTPS for GLPals 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-20 21:22:16 -05:00
Tad
ad466bd3e4
Various changes 
- 17.1: Add more captive portal server options like 18.1+, disabled: needs fixes
- 17.1: Add the hosts toggle like 18.1+
- 18.1: fix junk in patch
- 17.1+: hosts toggle: bugfix: fixup localhost handling by switching to strcmp
- 15.1: fixes to get hmalloc to compile, does NOT boot

Signed-off-by: Tad <tad@spotco.us>
 2023-01-20 18:59:02 -05:00
Tad
84a9a1326c
18.1+: add multiple captive potal server options 
This also switches 18.1 from @MSe1969's patch to the GrapheneOS patch
Can maybe port to 17.1 too

Signed-off-by: Tad <tad@spotco.us>
 2023-01-20 00:21:30 -05:00
Tad
91807acf21
various small fixes 
- loose versioning fixes for 4.9
- remove GPG commit verification for GOS repos, they use SSH now. TODO: support that
- 20.0: fixup AudioFX stray lines
- 20.0: broken fix for gs101/201 stray iwlan lines

Signed-off-by: Tad <tad@spotco.us>
 2023-01-18 20:02:11 -05:00
Tad
5ce2d33162
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-18 14:13:33 -05:00
Tad
b01e902988 m8: boost microphone volume patch from @Ke1i 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-14 14:01:30 -05:00
Tad
2153422bb0
Potentially unbreak video playback on vayu, davinci, guacamole*, and hotdog*. 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-13 21:27:18 -05:00
Tad
b82427ce5b Conservative reverse loose versioning for 3.10 
This applies 3.4 patches to 3.10 if no other match is available

Note: CVE-2017-13245/3.4/0002.patch ends up applied over CVE-2018-10902/3.18/0003.patch

Signed-off-by: Tad <tad@spotco.us>
 2023-01-13 15:51:46 -05:00
Tad
14f40e024f
Update CVE patchers 
This adds loose versioning applying 4.14 patches to 4.9

Signed-off-by: Tad <tad@spotco.us>
 2023-01-13 13:23:12 -05:00
Tad
3e5f1ec5ec Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-12 16:07:39 -05:00
Tad
207bdd2406
Strict versionCode checks for system apps from GrapheneOS 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-11 12:19:41 -05:00
Tad
312e0d5fc0 19.1: drop devices that are on 20.0 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-10 11:42:17 -05:00
Tad
8eca7f2149
20.0: add xz2 series + churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-09 13:47:10 -05:00
Tad
4012c57952 beryllium: fix a stutter 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-09 09:42:13 -05:00
Tad
7dbdcdf751 Tweak Aperture defaults 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-08 21:20:36 -05:00
Tad
c92c084ca1
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-08 20:49:57 -05:00
Tad
b143ffcd8b
15.1 January ASB work 
+ a missing patch from 2019-08

Signed-off-by: Tad <tad@spotco.us>
 2023-01-08 16:31:54 -05:00
Tad
57d951ccb5
Missing patches for 16.0 + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-08 13:22:50 -05:00
Tad
10c1d825c2
Revert e10d4b17 
17.1 is plagued with the same issue, no reason to use it

Signed-off-by: Tad <tad@spotco.us>
 2023-01-07 11:17:21 -05:00
Tad
efa31534a9
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-07 10:52:03 -05:00
Tad
3ac41a1918 Tweaks 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-05 10:09:04 -05:00
Tad
f2d87b1e81
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-01-03 20:18:40 -05:00
Tad
06eed1fba9
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-31 21:41:46 -05:00
Tad
035ae85e0f
19.1: drop devices that are on 20.0 
- there have been updater checks for all of these on 20.0, expect for aura
- 20.0 has been my daily driver on fajita (and recently bluejay) since mid October
- there are only some minor issues on 20.0 that aren't much of a blocker
- LineageOS has marked 20.0 stable

Signed-off-by: Tad <tad@spotco.us>
 2022-12-31 18:26:42 -05:00
Tad
e10d4b1799
17.1: restore m8 
18.1 has some display artifacting issues and hangs

Signed-off-by: Tad <tad@spotco.us>
 2022-12-28 14:38:05 -05:00
Tad
a3015c3ad0
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-26 16:12:03 -05:00
Tad
06254708be
Many fixes to get bluejay booting & working proper 
- Enable APEX for Pixel 6/7, necessary for camera and pKVM
  - Also drop hack removing pKVM for Pixel 6/7
  - patch from GrapheneOS

- Extend hmalloc workaround to /apex

- Deblobber:
  - actually handle wildcard f/w/b overlays
  - move some stuff around
  - remove some more Pixel blobs
  - flag and disable removal of camera extensions, being able to use the second camera is nice

- Adjust what hardenDefconfig disables, caused boot issues
  minimal impact as most of these are already default-disabled
  can be narrowed down in future

- Disable some of the bionic hardening patches, causing more boot issues
  annoying to lose, but having a phone that boots is more important

- Add LTE only mode to 17.1, 18.1, 19.1, and 20.0, credit GrapheneOS

- Remove Pixel 2 ramdisk compression reverts, fixed upstream

And yes, I know I should've split up this commit...

Signed-off-by: Tad <tad@spotco.us>
 2022-12-25 13:21:37 -05:00
Tad
751d1e8d72
Misc patches 
- 20.0: updated and enabled burnIn patch
- 19.1: fixup apps having data restrictions wrongly applied

Signed-off-by: Tad <tad@spotco.us>
 2022-12-23 10:09:37 -05:00
Tad
7d6b8e3aeb
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-22 11:33:47 -05:00
Tad
82d2066021
Disable removal of aptX 
Bluetooth audio is already awful enough, let's not make it worse

Signed-off-by: Tad <tad@spotco.us>
 2022-12-18 22:58:21 -05:00
Tad
b5bc269743
SBC dualchannel picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-18 21:47:22 -05:00
Tad
7277291dd7
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-18 21:46:00 -05:00
Tad
03293f6b52
Fixup 
Messy, but better to have CVE-2022-42896 applied to *some* 3.18 kernels

Signed-off-by: Tad <tad@spotco.us>
 2022-12-17 00:42:25 -05:00
Tad
77085c00f7
19.1: drop some devices in favor of 20.0 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-16 22:10:31 -05:00
Tad
c2fc228f3b Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-16 22:06:13 -05:00
Tad
23a723feb1
Pixel 6/7 compiling 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-16 03:34:58 -05:00
Tad
ad5de60266
More Pixel 6/7 work 
compiles, but fails to generate release due to pvmfw failure

Signed-off-by: Tad <tad@spotco.us>
 2022-12-15 20:49:30 -05:00
Tad
4f1c1b343c
Update commons 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-15 17:45:18 -05:00
Tad
684f4f68f0
Fixup license 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-15 17:39:21 -05:00
Tad
f1b5a8239f
Fix 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-14 22:52:32 -05:00
Tad
7f8ea96535
Pixel 6/7 prep + fixes 
These still need defconfig and deblobber handling

All of these sections were reviewed & sorted

Signed-off-by: Tad <tad@spotco.us>
 2022-12-14 22:23:31 -05:00
Tad
1eb373d1e0
15.1 December ASB work 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-12 21:01:34 -05:00
Tad
5e918c5506
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-12 19:30:56 -05:00
Tad
7dc3b8ef69
Tiny update 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-11 19:25:10 -05:00
Tad
26f301bd91
Maybe not necessary 
Sync with GrapheneOS/script

Signed-off-by: Tad <tad@spotco.us>
 2022-12-11 10:20:19 -05:00
Tad
29c9826c11
20.0: QPR1 churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-10 20:57:17 -05:00
Tad
b78f573eb9
Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-10 20:30:22 -05:00
Tad
63cbd1f483
14.1 December ASB, thanks to @syphyr 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-10 20:17:48 -05:00
Tad
abb616d2f3
Updates 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-09 17:23:20 -05:00
Tad
ce47fdae34
Small updates + Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-07 18:41:50 -05:00
Tad
a62922e72d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-12-06 15:00:40 -05:00
Tad
0aa4fd0fc3
Update CVE patchers 
Appears I skipped 20.0 by accident last update

Signed-off-by: Tad <tad@spotco.us>
 2022-12-05 14:23:06 -05:00
Tad
3c8c235758
Ugly workaround 
For bug exposed after:
https://review.lineageos.org/c/LineageOS/android_frameworks_base/+/344890

Signed-off-by: Tad <tad@spotco.us>
 2022-12-03 23:58:36 -05:00
Tad
178e127338
Small tweaks + churn 
Fixes recovery not booting on 20.0

Signed-off-by: Tad <tad@spotco.us>
 2022-12-03 16:19:31 -05:00
Tad
038fca449b
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-30 08:28:40 -05:00
Tad
680bf51e05
Ugly hack 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-22 07:24:21 -05:00
Tad
fd0e3e8117
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-22 07:11:30 -05:00
Tad
c4fe56a307
Update CVE patchers 
This fixes CVE-2018-9422 which was primarily added via b56fabac

May still need to be fixed:
16.0/kernel_google_yellowstone
16.0/kernel_xiaomi_msm8937

Signed-off-by: Tad <tad@spotco.us>
 2022-11-21 08:39:10 -05:00
Tad
7f24df22f7 Small updates 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-21 06:09:29 -05:00
Tad
ad5f2d7bfa
Fix firmware flash denial for OP7 series 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-16 18:42:17 -05:00
Tad
9d1efb33c3
More 14.1 picks + 15.1 November ASB work 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-13 23:21:41 -05:00
Tad
14f7f1db32
Updates + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-13 02:06:05 -05:00
Tad
b81d39c969
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-11 16:05:22 -05:00
Tad
27395374e1
Fixup + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-11 13:54:57 -05:00
Tad
8bfedda18b
14/15/16: Fix compile failure with modern kernels 
https://android-review.googlesource.com/c/platform/art/+/2226578
https://groups.google.com/g/Android-building/c/ZfUQQWt_ABI

Signed-off-by: Tad <tad@spotco.us>
 2022-11-10 18:26:36 -05:00
Tad
8d4d73d65c
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-09 18:11:48 -05:00
Tad
807a08210a
Tweaks 
- 20.0: pick fixes for the deny usb toggle
- 20.0: pull in a patch from GrapheneOS removing a package list leak

Signed-off-by: Tad <tad@spotco.us>
 2022-11-07 20:30:36 -05:00
Tad
ac3dc319c7
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-07 15:51:17 -05:00
Tad
b9f4074226 20.0: disable the broken monet toggle patch 
Has some weird inconsistencies

Signed-off-by: Tad <tad@spotco.us>
 2022-11-03 14:49:28 -04:00
Tad
7fb334d825
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-11-03 13:25:38 -04:00
Tad
aa4ffdb014
20.0: add taimen/walleye 
not stable yet, ims crashes invoking rescueparty

Signed-off-by: Tad <tad@spotco.us>
 2022-10-31 18:31:55 -04:00
Tad
11780d890f Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-24 22:53:41 -04:00
Tad
c051cb282d Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-22 21:39:01 -04:00
Tad
1338c24d9b
Disable CarrierConfig and carrier_list changes 
I've had reports of non-functional SIM and reboots with select carriers on this last update

Signed-off-by: Tad <tad@spotco.us>
 2022-10-20 19:42:01 -04:00
Tad
dfcbf14c17
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-19 22:13:14 -04:00
Tad
006f128fc5
15.1: October 2022 ASB picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-19 16:08:18 -04:00
Tad
6b07bc77a5
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-19 15:25:56 -04:00
Tad
8ddbd86d44
20.0: more devices 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-19 15:22:20 -04:00
Tad
148df59b7e
Cleanup: Drop UnifiedNlp, FDroidPrivExt, and Silence 
These haven't been included for a while

+remove some old cruft from 20.0

Signed-off-by: Tad <tad@spotco.us>
 2022-10-19 12:15:24 -04:00
Tad
d2096c86d9
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-18 22:44:01 -04:00
Tad
0c4db149e1
20.0: Network & Sensors permission from GrapheneOS 
This revokes the permissions to all user installed apps on update.
Likely an expected quirk of being on 20.0 without the permission.
19.1 upgrades and new 20.0 installs should be fine.

TODO: update 19.1 with the SpecialRuntimePermAppUtils too

Signed-off-by: Tad <tad@spotco.us>
 2022-10-18 22:14:56 -04:00
Tad
cdca2c032e
20.0: add barbet 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-17 07:25:53 -04:00
Tad
91b908a78a
20.0: more fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-17 06:39:55 -04:00
Tad
e8248e4938
20.0: fixes + r11 churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-16 17:18:06 -04:00
Tad
4524eb43d3
20.0: It boots! 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-16 08:54:04 -04:00
Tad
5b114cacf8
20.0: More fixes 
It compiles, but fails to sign:
> TypeError: cannot use a string pattern on a bytes-like object

Signed-off-by: Tad <tad@spotco.us>
 2022-10-15 17:20:41 -04:00
Tad
5cada3a769
20.0: Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-15 15:53:17 -04:00
Tad
20cfa30df0
20.0: Initial roster 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-15 14:42:10 -04:00
Tad
055ed9bfad
20.0: Initial bringup 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-15 10:39:48 -04:00
Tad
2acd454f13
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-13 23:42:20 -04:00
Tad
820c47caea
Update Carrier Configs 
CarrierConfig@6563341442262a4b79a4a2674679615f010b9837
TelephonyProvider@20a6228381b3e89e8c0972d115d422c08e0c9adb

Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 21:41:08 -04:00
Tad
e3125dd7de
Update VVM and MMS configs from GrapheneOS 
VVM: 2637686af5
MMS: 0c7e979f05

Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 21:33:47 -04:00
Tad
1543d2dc17
Cleanup 
Missed from 42306525

Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 17:11:40 -04:00
Tad
2166491d5d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 17:11:06 -04:00
Tad
75abc8b9ec
19.1: add a modified patch from GrapheneOS to disable connectivity checks 
This removes their option for their servers

Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 16:14:41 -04:00
Tad
fe95f700d8 Remove the CNE and DPM blobs + churn 
Just say no!

Signed-off-by: Tad <tad@spotco.us>
 2022-10-12 01:23:45 -04:00
Tad
e7968e1269
Picks + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-09 16:35:12 -04:00
Tad
4230652540
18.1: Drop all devices working on 19.1 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-03 21:10:04 -04:00
Tad
bf66d5db45
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-03 20:59:55 -04:00
Tad
348b392f03
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-03 10:24:04 -04:00
Tad
d78121a1c0
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-03 10:22:17 -04:00
Tad
c9b14ae70d
Make hardenDefconfig more manageable 
No functional changes

Signed-off-by: Tad <tad@spotco.us>
 2022-10-03 09:04:02 -04:00
Tad
da2e44c5f3
Add back the CNE and DPM blobs + churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-10-02 11:47:58 -04:00
Tad
598d78bb61
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-25 13:49:45 -04:00
Tad
25568706e1
Various 
- Add back the SIM ToolKit app
- 17.1: CarrierConfig testing
- 19.1: Enable op5 firmware inclusion, needs testing
- Don't disable coresight bits on op8, breaks compile
- 19.1: Add a patch from GrapheneOS to display/share logs when a crash happens

Signed-off-by: Tad <tad@spotco.us>
 2022-09-23 22:53:12 -04:00
Tad
411fcc08e1
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-15 14:11:58 -04:00
Tad
eb200546ea
17.1+: Update carrier configs for improved compatibility 
CarrierConfig@c2819f8
TelephonyProvider@af5c1386

Signed-off-by: Tad <tad@spotco.us>
 2022-09-14 14:58:01 -04:00
Tad
4573f6d7c3
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-13 22:41:48 -04:00
Tad
ec42acceb6
Various fixes from GrapheneOS 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-13 10:24:26 -04:00
Tad
3b0c05fe7c
Pull VVM config from GrapheneOS instead of LineageOS 
79.0.438914483 instead of 72.0.407683083

Signed-off-by: Tad <tad@spotco.us>
 2022-09-13 10:14:05 -04:00
Tad
202033c013
Pull in old cherrypicks + 5 missing patches from syphyr 
This adds 3 expat patches for n-asb-2022-09
from https://github.com/syphyr/android_external_expat/commits/cm-14.1
and also applies 2 of them to 15.1

Signed-off-by: Tad <tad@spotco.us>
 2022-09-11 14:02:35 -04:00
Tad
df3db92d5a
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-10 22:09:18 -04:00
Tad
e2b314da3c
15.1+16.0: September 2022 ASB picks 
16.0 backports thanks to MSe1969 as usual:
https://github.com/lin16-microg/android_system_bt/commits/lineage-16.0 - last 3 commits
https://github.com/lin16-microg/android_frameworks_base/commits/lineage-16.0 - last 4 commits
https://github.com/lin16-microg/android_external_expat/commits/lineage-16.0 - last 4 commits

Signed-off-by: Tad <tad@spotco.us>
 2022-09-10 18:32:25 -04:00
Tad
e5eb67f77d
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-08 16:07:23 -04:00
Tad
2bc43f195c
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-07 10:04:28 -04:00
Tad
b6e9f50cb5
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-09-04 14:05:36 -04:00
Tad
5fe5a4f898
Compile fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-29 14:26:47 -04:00
Tad
e9f124b52d
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-27 15:14:07 -04:00
Tad
86ed884251
More verification 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-26 23:14:15 -04:00
Tad
3618774d9f
GPG verification for all platform repositories 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-26 22:40:27 -04:00
Tad
7854c05aa4
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-26 20:09:50 -04:00
Tad
da15dc05d5
Fixup 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-26 14:00:52 -04:00
Tad
adb61b0fb2
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-26 12:15:45 -04:00
Tad
c97f8a1b6a
Only enable CONFIG_DEBUG_NOTIFIERS on kernels <=4.9 
OnePlus 9 failed boot kernel log points to this.
GrapheneOS noted this as an inherent issue on the Pixel 4 and 5 too.

Signed-off-by: Tad <tad@spotco.us>
 2022-08-25 15:20:28 -04:00
Tad
4bfedbc42d
Fixup and enable GPG verification 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-24 15:52:55 -04:00
Tad
d8d8e457a1 Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-21 10:44:12 -04:00
Tad
6502a36cf1 Fixup 
These scripts aren't expected to be run from a workspace

Signed-off-by: Tad <tad@spotco.us>
 2022-08-15 16:40:32 -04:00
Tad
7918347d1c Updates 
- Add a script to update commons like APNs, VVM configs, and contributors cloud
- Add the latest contributors cloud to all branches
- Update wireless-regdb to 2022.08.12 release
- Add some shell opts to some scripts

Signed-off-by: Tad <tad@spotco.us>
 2022-08-15 16:37:42 -04:00
Tad
a78f9217c6 Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-14 19:56:28 -04:00
Tad
cf019edef9 Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-13 18:54:50 -04:00
Tad
ebdf629cbc 15.1 ASB work 
Compile tested

Signed-off-by: Tad <tad@spotco.us>
 2022-08-12 21:10:31 -04:00
Tad
8b67d5c41e Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-10 22:02:37 -04:00
Tad
40d7fac99a Churn 
https://github.com/voron00/android_kernel_lge_mako/pull/1

Signed-off-by: Tad <tad@spotco.us>
 2022-08-10 10:57:49 -04:00
Tad
12c56938cb Improve CVE-2021-1048 patching on 3.x kernels 
It is still actively being used by malware.

This largely handles 3.0, 3.4, and 3.10 kernels.
It works for select 3.18 kernels too.

TODO: need alternate get_file_rcu backport for the following:
15.1/lge_msm8996
15.1/zte_msm8996
16.0/xiaomi_msm8937
17.1/motorola_msm8996
18.1/google_marlin
18.1/lge_msm8996
18.1/oneplus_msm8996

Signed-off-by: Tad <tad@spotco.us>
 2022-08-09 21:39:25 -04:00
Tad
b4f17b39cd Make available some additional scripts 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-09 18:50:49 -04:00
Tad
c69d8aec8b Add the wallpaper resize script 
Should probably be moved into a separate branding repo later

Signed-off-by: Tad <tad@spotco.us>
 2022-08-09 13:42:08 -04:00
Tad
4d9a110970 Pick 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-08 18:47:17 -04:00
Tad
0ffbe79e1a FP4 + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-08 15:02:14 -04:00
Tad
e0b57197ea Churn 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-06 11:30:49 -04:00
Tad
31a67f054d Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-04 11:12:40 -04:00
Tad
933f33ba6b Cherrypicks 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-04 09:57:11 -04:00
Tad
162f4f450a 19.1: add FP4 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-03 12:45:26 -04:00
Tad
0d8ab187e3 Revert past two commits 
Disabling extended sizes classes does not appear to have the savings it does on desktop.
Disabling the quarantine isn't acceptable given that default scudo implements it
 2022-08-03 00:24:39 -04:00
Tad
005ef7882a Fixup a00fa234 
This variant passess all tests instead of failing six tests

Signed-off-by: Tad <tad@spotco.us>
 2022-08-02 22:52:42 -04:00
Tad
a00fa2349e Switch to a memory efficient hardened_malloc variant 
This should help 64-bit devices with <4GB RAM substantially, at reduced hardening.

clark for example only has 2.5GB of usable memory and idles at 1.6GB used.
After this change, idle usage drops to 1.1GB!

Signed-off-by: Tad <tad@spotco.us>
 2022-08-02 20:29:10 -04:00
Tad
178f01958d Cherrypicks 
Signed-off-by: Tad <tad@spotco.us>
 2022-08-02 19:39:09 -04:00
Tad
2b299c1aff Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2022-07-21 21:28:26 -04:00