Commit Graph

961 Commits

Author SHA1 Message Date
Tad
1bd0e47099 victara: 15.1 -> 16.0
- other fixes
2019-08-30 22:42:10 -04:00
Tad
330df0983c 16.0: Add GrapheneOS' exec-based spawning feature + misc tweaks
- patch credit updates
- 16.0: allow SystemUI to directly manage Bluetooth/WiFi
 - from GrapheneOS
- cleanup
2019-08-30 02:30:13 -04:00
Tad
e10a865b05 Improve release processing to support deltas and archiving 2019-08-29 19:09:31 -04:00
Tad
057bedb65b Minor tweaks
- 14.1+15.1+16.0: enable kernel protections for files
 - protected_*: hardlinks, symlinks, fifos, regular
 - from GrapheneOS
- defconfig: enable more verity options
- cleanup
2019-08-28 20:24:59 -04:00
Tad
db348ab09c Minor tweaks
- 15.1+16.0: Replace in-line build signing patch with bash function
 - From GrapheneOS/script
- 15.1+16.0: Enable fingerprint failed lockout after 5 attempts
 - From GrapheneOS
2019-08-28 00:40:27 -04:00
Tad
eccf9c6f6d Many new devices
- hammerhead: 15.1 -> 16.0

- axon7: 14.1, 15.1
- cheryl: 16.0
- crackling: 14.1, 15.1, 16.0
- ham: 14.1, 15.1, 16.0
- kipper: 14.1, 15.1, 16.0
- z2_plus: 16.0
2019-08-23 17:27:53 -04:00
Tad
e9b5c06188 Lots of device updates
- d802: 15.1 -> 16.0
- d852: 15.1 -> 16.0
- d855: 15.1 -> 16.0
- fugu: 15.1 -> 16.0
- jfltexx: 14.1 -> 16.0
- m8: 15.1 -> 16.0
- mata: 15.1 -> 16.0
- update cherrypicks
- defconfig: enable MMC_SECDISCARD
2019-08-23 11:47:43 -04:00
Tad
3a080bbcd7 Minor tweaks 2019-08-13 01:56:01 -04:00
Tad
89de66bdba Many small changes
- Cherrypicks for ASB patches
- Apps: Switch gallery to Simple Gallery
- Apps: Switch camera to OpenCamera
- PKGBUILD: update with image optimization dependencies
- Deblobber: fix bug introducted in 6d33e4ecbf
2019-08-08 14:22:24 -04:00
Tad
6d33e4ecbf Parallize many functions invoked by find 2019-08-05 21:09:35 -04:00
Tad
3f8e9a846b Complete tree image optimization
- recursively optimize images using optipng/jpegoptim
benefits:
+ reduces image size
+ decreases load time
+ reduces memory usage
2019-08-05 20:34:08 -04:00
Tad
aee6b66dd8 Update CVE patchers 2019-08-05 16:03:41 -04:00
Tad
bad890614e Update CVE patchers 2019-07-21 09:47:10 -04:00
Tad
34d1bbe155 Minor updates 2019-07-21 07:36:02 -04:00
Tad
6458d6785f Enable IPv6 privacy extensions 2019-07-05 16:47:59 -04:00
Tad
4fe74583a9 Minor tweaks 2019-07-03 10:42:24 -04:00
Tad
a29825f6e1 Update CVE patchers 2019-07-01 18:06:05 -04:00
Tad
e41d053f00 Minor updates
- drop usage stats patch, causes Settings to crash
2019-06-27 23:01:28 -04:00
Tad
55c3072089 Going the distance... [pt2] 2019-06-18 13:51:04 -04:00
Tad
c15105d945 Update CVE patchers 2019-06-17 23:26:38 -04:00
Tad
02cf6e4778 Update cherry picks 2019-06-17 14:43:14 -04:00
Tad
1d67143181 Update CVE patchers 2019-06-08 04:09:24 -04:00
Tad
aa4ad7a6da Cherry picks 2019-06-06 10:45:00 -04:00
Tad
d7078bafd6 Update CVE patchers 2019-06-03 18:41:24 -04:00
Tad
bb72bccbeb Two hardening patches from @MSe1969
+ a backport of browser location restriction patch to 14.1 and 15.1
  by @syphyr
2019-06-02 19:25:29 -04:00
Tad
163fdb1f68 Minor updates 2019-05-31 21:13:39 -04:00
Tad
380353773e Fixes 2019-05-17 20:48:26 -04:00
Tad
899812864f Update CVE patchers 2019-05-14 21:04:55 -04:00
Tad
c040d79c9b 16.0: add FP2 2019-05-13 13:51:48 -04:00
Tad
ebaf61eb31 Cherrypicks 2019-05-07 03:10:55 -04:00
Tad
b2e521440e Update CVE patchers 2019-05-06 18:31:06 -04:00
Tad
f59c77f00c Cherrypicks 2019-05-06 16:29:58 -04:00
Tad
08a2506fe9 14.1: support i9300 and n7100
i9300 has less blobs compared to i9305 due to different modem
2019-05-02 16:42:50 -04:00
Tad
cc976eeffe Minor tweaks 2019-04-16 22:34:31 -04:00
Tad
f8cfdbca4f Update CVE patchers 2019-04-07 20:31:27 -04:00
Tad
304f39918c Update cherrypicks 2019-04-07 17:31:23 -04:00
Tad
20c8c7525c Misc tweaks
- 15.1: Contacts: remove Privacy Policy and Terms of Service links
  - from GrapheneOS
- cherry picks
2019-04-06 22:55:14 -04:00
Tad
974cc3b3f8 16.0: recovery has been updated
but leave it disabled because it doesn't boot
2019-04-04 23:33:10 -04:00
Tad
935795f5bb Minor tweaks 2019-04-04 15:51:00 -04:00
Tad
25cc717ec2 Use GrapheneOS' hardened memory allocator
+ 16.0: some other misc hardening patches from GrapheneOS
  - always restrict access to Build.SERIAL
  - don't grant location permission to system browsers
  - fbe: pad filenames more
+ 16.0: Contacts: remove Privacy Policy and Terms of Service links
2019-04-04 01:07:58 -04:00
Tad
60cf364f19 Minor tweaks
- init.sh: sort options
- overlay: leave radioScanningTimeout default
- hardenDefconfig: disable more components with CVEs
- cherry picks
- 16.0: trebuchet: tmp fix for default workspace overlay
2019-04-03 19:04:37 -04:00
Tad
1c49b80da0 Minor tweaks
- CVE patchers were updated with no change
- hardenDefconfig: disable MSM_SMP2P_TEST to mitigate CVE-2019-2247
- 14.1 add a cherry pick
2019-04-01 18:57:04 -04:00
Tad
7223df543a Minor fixes 2019-03-31 22:46:37 -04:00
Tad
61ee2e5757 More minor fixes 2019-03-26 19:37:56 -04:00
Tad
3c806603d9 Various fixes 2019-03-25 21:30:26 -04:00
Tad
8f609e9cbe Minor tweaks
+ remove a few more blobs
+ fix broken USB and log spam on hdx*
2019-03-24 16:32:55 -04:00
Tad
510fa2163e Cherry picks 2019-03-22 08:10:20 -04:00
Tad
c64ad2ecdc Make it easier to build all supported branches of a device 2019-03-22 05:38:58 -04:00
Tad
97dc687812 Update cherry picks 2019-03-15 22:13:32 -04:00
Tad
b1455b641d Update CVE patchers 2019-03-08 15:15:46 -05:00
Tad
913fbcd109 ASB cherry picks + minor tweaks 2019-03-05 22:57:45 -05:00
Tad
5607db2e0b Update CVE patchers
- More aggressively attempt to apply incremental patches by
  ignoring the current subversion, as it is common for it to be 0
  Hopefully I won't have to revert this
2019-03-04 21:41:55 -05:00
Tad
9e897989d1 Update CVE patchers 2019-03-04 20:18:29 -05:00
Tad
afe719ffc4 16.0: Initial bringup
- 14.1/15.1: Remove @ValdikSS' bluetooth patches
- 15.1: Cleanup
2019-03-04 02:45:54 -05:00
Tad
83478880ef WireGuard kernel module inclusion support 2019-03-04 00:06:22 -05:00
Tad
6eab4c6529 Minor updates 2019-02-22 08:38:24 -05:00
Tad
bc63feedc9 Update CVE patchers 2019-02-21 06:25:47 -05:00
Tad
fccc124868 tuna fixes + fdroid priv changes 2019-02-14 04:36:50 -05:00
Tad
b9ff7a74e6 Updates and fixes 2019-02-12 16:09:41 -05:00
Tad
c9e17ffb52 Many changes
- Add more DNS resolver choices
- Change default DNS resolver back to OpenNIC
- More cleanup
- 15.1: Update some CVE patchers
2019-02-09 20:51:23 -05:00
Tad
ffabfb3616 14.1: fix maguro denials 2019-02-09 14:47:55 -05:00
Tad
a7a4e869fd Many changes
- Remove broken/permissive devices
- Notify user when location is requested via SUPL
- 15.1: skia cherrypicks for Feb ASB
- 15.1: recovery: change selected text color
2019-02-09 14:20:19 -05:00
Tad
9178760d1a Updater: Fix downloads over Tor
+ Update TODO
+ Minor tweaks
2019-02-08 20:58:15 -05:00
Tad
24c291c630 Improve hardenLocation to include fwb and its overlays 2019-02-08 18:46:42 -05:00
Tad
aa9b5499e6 Updates 2019-02-07 11:15:29 -05:00
Tad
3f9d78a4c7 Updates 2019-02-06 17:44:17 -05:00
Tad
15237becbb Update CVE patchers 2019-02-04 16:03:59 -05:00
Tad
db260cf1e1 Updates 2019-02-02 06:11:41 -05:00
Tad
378971497c 14.1: Support unified tuna 2019-02-01 02:53:13 -05:00
Tad
0ea1d37f0c Minor changes
- Update cherrypicks
- Update submodules
- Add some comments
2019-01-28 21:54:45 -05:00
Tad
a7a0a67888 Many changes
- Allow enabling accessibility services without disabling secure start-up
- Disable overclocks
- Update select CVE patchers
- Update submodules
- Support select downloads over Tor
- Update defconfig enablers
- Cherry pick security patches
2019-01-14 03:12:50 -05:00
Tad
ec3ffa38f2 Fixup CVE patchers 2019-01-07 19:42:25 -05:00
Tad
d8aac4c07b Update CVE patchers 2019-01-07 17:07:00 -05:00
Tad
c27f226269 Properly fix network mode patch 2018-12-29 12:19:27 -05:00
Tad
0df749ef73 Add more preferred network modes such as LTE Only, LTE/3G only, and 3G only 2018-12-28 08:02:24 -05:00
Tad
c07027dd97 Many changes
- Update CVE patchers
- Update submodules
- Update defconfig enablers
- Update DNS IP addresses
- + Misc changes
2018-12-24 23:29:56 -05:00
Tad
01be578137 11.0: Initial restore
I think this is like the 6th time I've done this.
I always remove it, wait a few months, pull out a device that I want to run it on
and then spend hours restoring and bringing it back. I always think to myself
do I really need to toy with this device? No, I don't, but I do it anyway. :)
2018-12-18 21:35:14 -05:00
Tad
982462aa00 Update CVE patchers 2018-12-04 17:21:39 -05:00
Tad
90a967c552 Misc device fixes 2018-11-15 01:25:22 -05:00
Tad
6ea39e0a0f Updates 2018-11-13 17:33:49 -05:00
Tad
a2fd561a9b Temp fix for wrongly versioned CVE patch
- TODO: Regen CVE patchers
2018-11-06 22:22:22 -05:00
Tad
5be6227a8b Minor updates + Update CVE patchers 2018-11-06 21:09:35 -05:00
Tad
8708358645 Minor updates 2018-10-29 21:52:33 -04:00
Tad
34be4797ea Switch to official F-Droid 2018-10-20 16:26:42 -04:00
Tad
95959a0d89 Many changes
- Add back microG support (not enabled)
- Add choice between DNS66 and Blokada when $DOS_HOSTS_BLOCKING=false
2018-10-19 18:28:18 -04:00
Tad
5696da8d0c Many changes
- 15.1: Update some CVE patchers
- 15.1: Address some mako denials
- 14.1: Add cherrypicks for various security patches
- Common: Prepare for F-Droid additional repos
- Common: Disable overclock for mako
- Misc tweaks
2018-10-19 09:55:08 -04:00
Tad
586f967667 Minor updates 2018-10-14 20:21:06 -04:00
Tad
136bb520aa Update CVE patchers 2018-10-01 22:45:00 -04:00
Tad
776be6f992 Backport Updater Tor support patch to 14.1 2018-09-24 06:46:54 -04:00
Tad
08c65c8334 Patches to add captive portal check toggle from @MSe1969 2018-09-22 21:05:41 -04:00
Tad
137c8d992d Various changes 2018-09-21 16:32:02 -04:00
Tad
8347c07ec1 Deduplicate Overclock.sh and Optimize.sh 2018-09-21 03:55:54 -04:00
Tad
b50352bc8e Updater: Add initial Tor support 2018-09-20 21:45:58 -04:00
Tad
c012af895f Updates 2018-09-18 20:55:45 -04:00
Tad
51fd815236 Update CVE patchers 2018-09-13 21:53:30 -04:00
Tad
a39764938c Build fixes and updates 2018-09-12 22:51:05 -04:00
Tad
f8a438b32a Update CVE patchers 2018-09-12 15:45:35 -04:00
Tad
d9970b3f77 Minor tweaks and update F-Droid 2018-09-12 13:43:05 -04:00
Tad
e5b588265c Add function to always ensure discard mount option is enabled 2018-09-11 19:53:50 -04:00
Tad
d231bd3172 Build fixes 2018-09-06 07:48:10 -04:00
Tad
465008cc14 Update CVE patchers 2018-09-05 07:07:38 -04:00
Tad
8e79da6971 GPG verify all F-Droid apps before copy 2018-08-30 23:46:17 -04:00
Tad
44b799afb1 Update F-Droid 2018-08-26 23:10:42 -04:00
Tad
44a192b7a4 Various fixes 2018-08-26 20:32:19 -04:00
Tad
e078d37b82 Enable previously added Bluetooth patches 2018-08-24 13:52:34 -04:00
Tad
9fb6c648d9 Partial revert of 1983d9a8f7 2018-08-24 00:26:35 -04:00
Tad
642f978509 Experimental Bluetooth audio quailty improvement patches, credit @ValdikSS 2018-08-23 22:31:43 -04:00
Tad
1983d9a8f7 Update CVE patchers 2018-08-23 21:26:33 -04:00
Tad
2a427a14bf More geminipda work 2018-08-23 19:25:33 -04:00
Tad
9cbc514c59 Initial support for geminipda 2018-08-23 18:50:13 -04:00
Tad
c3f480b867 Updates 2018-08-17 19:22:00 -04:00
Tad
1c0dfb1839 Update CVE patchers + misc fixes 2018-08-14 14:51:14 -04:00
Tad
17340a0963 Update CVE patchers 2018-08-10 21:03:28 -04:00
Tad
db3b42ae4f Update CVE patchers + misc fixes 2018-08-08 20:23:26 -04:00
Tad
bf717204e3 GPS improvements 2018-08-07 23:28:38 -04:00
Tad
ce42870cd2 Fixes 2018-08-07 14:26:15 -04:00
Tad
46b1b409c9 Update CVE patchers 2018-08-06 21:32:33 -04:00
Tad
94f1382077 Updates 2018-07-25 21:56:11 -04:00
Tad
13fd3fab51 fugu fixes 2018-07-22 17:08:22 -04:00
Tad
e3dcb260aa Update CVE Patchers
- and add initial rpi3 support
2018-07-22 09:37:23 -04:00
Tad
b384623f16 Deblobber: TimeKeep replacement fixes
- Still needs more fixes
- 14.1: Also update CVE patcher for motorol_msm8916
2018-07-20 20:06:36 -04:00
Tad
9af1881a89 Many changes
- 15.1: Fix build
- 15.1: Add jfltexx
- 15.1: Add CVE patchers for jf and fugu
- Manifests: Add Intel repos back
- Overlay: Add more default apps to launcher
- Remove more blobs
2018-07-19 22:15:20 -04:00
Tad
bf1256f182 Final overlay fixes 2018-07-13 22:04:42 -04:00
Tad
df213a8b19 Overlay fixes and F-Droid additional repos prep 2018-07-13 17:43:14 -04:00
Tad
2f50e7c142 Overlay fixes 2018-07-13 01:45:38 -04:00
Tad
91a6b29806 More overlay work 2018-07-13 01:02:41 -04:00
Tad
2ee7a13a80 More overlay work 2018-07-12 22:43:28 -04:00
Tad
2c6ba127d4 More overlay work 2018-07-12 22:29:21 -04:00
Tad
f95b73fe06 More overlay work 2018-07-12 22:19:30 -04:00
Tad
9dec3c7018 More overlay work 2018-07-12 22:12:55 -04:00
Tad
1dc92478ed Many changes
- Drop Copperhead patches
- More overlay work
2018-07-12 22:05:02 -04:00
Tad
79972d393c DNM: WIP: Migrate to a proper vendor overlay for most changes 2018-07-12 21:27:01 -04:00
Tad
bf49c6a5fa Many changes
- Remove more blobs
- 14.1: Add fugu
- 15.1: Add fugu and readd clark
2018-07-12 21:14:11 -04:00
Tad
cb8fdaf3f5 Low RAM tweaks 2018-07-11 14:20:15 -04:00
Tad
e2ae8e333a More terminators 2018-07-11 08:01:45 -04:00
Tad
5af16e1ddd Add build option to enable lowram/go on all devices 2018-07-10 21:45:11 -04:00
Tad
8b2902fd94 Tweaks 2018-07-10 17:59:03 -04:00
Tad
68f77e0a23 Many changes
- 11.0: More work
- 14.1: Grouper fixes
2018-07-09 21:31:24 -04:00
Tad
58d7e42a1d Initial support for 11.0 2018-07-09 16:04:09 -04:00
Tad
bd5b0f6146 Tweaks 2018-07-07 02:37:00 -04:00
Tad
ae0d89ee8a Many changes
- Switch to new HOSTS list
- Minor tweaks
- 14.1: Fix default Trebuchet workspaces
2018-07-04 15:35:16 -04:00
Tad
31444ad3c8 Update CVE patchers 2018-07-02 23:16:36 -04:00
Tad
30d59ea53d More devices
- 14.1: dragon, manta, us996, us997, victara
- 15.1: dragon, us996, us997, victara
- Deblobber: Remove more blobs
2018-06-30 14:03:11 -04:00
Tad
d2ba1ddb20 Overhaul variable names 2018-06-29 13:46:12 -04:00
Tad
4917b3ebc7 Cleanup 2018-06-28 23:17:59 -04:00
Tad
303fe971ed Many changes
- 14.1: Fixup previous commits
- 15.1: Add mata
- Deblobber: Remove more blobs (audiofx, cne, hdr, ims-rtp)
2018-06-28 20:11:20 -04:00
Tad
29ace39eb9 Fixup previous 2 commits + misc tweaks 2018-06-27 12:04:42 -04:00
Tad
d0dd1893c6 14.1: Add back CVE patchers for removed devices + misc fixes 2018-06-27 10:09:26 -04:00
Tad
5d4d12b324 14.1: Add back all devices that were moved to 15.1 2018-06-27 09:17:50 -04:00
Tad
746b695d6a Deduplicate updater patches 2018-06-27 08:43:12 -04:00
Tad
e65234f8eb Many changes
- Allow OTA server to be set from init.sh
- Fix link updating from Rebrand.sh
- Update CVE patchers
2018-06-26 21:47:45 -04:00
Tad
af9126ffcb More deduplication
- Deduplicate Trebuchet default workspaces
- Deduplicate LatinIME patches
- Deduplicate SetupWizard assets
- And fix a typo with grouper overclock
2018-06-26 21:25:59 -04:00
Tad
14b5b95cb8 Add overclocks for grouper 2018-06-26 13:58:08 -04:00
Tad
6746942f30 14.1: Add grouper 2018-06-26 05:57:22 -04:00
Tad
3e931219df Few changes
- Fix F-Droid building
- Update F-Droid preferences
- Add privacy policy links for DNS presets
2018-06-25 19:15:22 -04:00
Tad
ee4ea5072b Many changes
- Fixed UnifiedNLP not registering
- Inlined location provider patch
- Simplified generateBootAnimationShine
- Add notes about inclusion of other apps
- Replaced microG with just UnifiedNLP
2018-06-25 14:19:38 -04:00
Tad
c914a655a5 Fixup previous commits 2018-06-25 10:16:32 -04:00
Tad
accb8bba37 Implement choice between gradient and plasma for boot animation shine 2018-06-25 09:35:38 -04:00
Tad
97248d28f2 Implement choice of UnifiedNLP only or full microG 2018-06-25 09:31:31 -04:00
Tad
f6cdc9426c Many changes
- Remove proprietary audio enhancement blobs
- Remove AudioFX to prevent crashes after blobs are removed
- Deduplicate patches a bit with the new Patches/Common directory
- Switch boot animation shine generation from gradient to plasma
- Update submodules
2018-06-25 07:59:24 -04:00
Tad
0eeea28907 Boot animation color improvements 2018-06-24 10:18:19 -04:00
Tad
bfa7e90d5e Boot animation shine! 2018-06-24 08:42:02 -04:00
Tad
b0b71adf66 15.1: Theme recovery 2018-06-24 08:18:14 -04:00
Tad
30a8e0ba07 Minor tweaks 2018-06-24 05:26:03 -04:00
Tad
c44d11fb99 Boot animation customization! 2018-06-24 04:31:38 -04:00
Tad
3a3fe5aca9 Replace DNS patches with a function + some misc fixes 2018-06-24 01:27:33 -04:00
Tad
5772b68224 Update CVE patches + more globbing fixes 2018-06-23 03:39:01 -04:00
Tad
79429b40a4 Add init.sh option to remove AudioFX 2018-06-23 00:51:10 -04:00
Tad
af94760587 Remove msm8992 overclocks 2018-06-23 00:23:34 -04:00
Tad
9c3996bed9 Shellcheck
mainly just double quoting
2018-06-23 00:21:48 -04:00
Tad
9b156f7b66 Allow rebrander to be configured from init.sh + misc changes
- Add caffeine to default quick tiles
2018-06-22 23:41:08 -04:00
Tad
79aa32c5e2 Cleanup 2018-06-13 19:48:53 -04:00
Tad
2ed7a8a874 init.sh: add options to control extra parts of the deblobber 2018-06-13 07:07:47 -04:00
Tad
97fc2a236f Fixes and AES improvements ? 2018-06-12 15:25:06 -04:00
Tad
7c052a7b38 Tweaks 2018-06-12 13:34:59 -04:00
Tad
7005ff0073 15.1: Update CVE patchers + build fixes 2018-06-11 20:33:16 -04:00
Tad
8eeafdd09f Changes for trust_interface and other misc tweaks 2018-06-10 19:00:02 -04:00
Tad
3ea4b55e70 Tweaks and add a script for creating signing keys 2018-06-10 17:07:25 -04:00
Tad
4912609425 Tweaks 2018-06-08 14:15:50 -04:00
Tad
dc9ec2d8f3 Tweaks 2018-06-06 17:32:17 -04:00
Tad
b10f0a97dc Update CVE patchers + misc fixes 2018-06-05 00:35:42 -04:00
Tad
eeba3fd873 Going the distance... 2018-06-03 14:13:59 -04:00
Tad
3fb3824f6d Misc tweaks 2018-06-03 08:29:15 -04:00
Tad
c6f7abd855 Add an option to disable overclocks 2018-06-03 07:48:34 -04:00
Tad
bf8f1e4d3d More fixes and cleanup 2018-06-02 18:34:15 -04:00
Tad
2345e7ed7d Fixes 2018-06-02 18:13:51 -04:00
Tad
e224489acd Add option to enable strong encryption 2018-06-02 18:04:03 -04:00
Tad
8698ccc0c2 Add option to choose between DNS patches 2018-06-02 18:02:26 -04:00
Tad
747af2bc1c Add option to disable inclusion of our HOSTS file 2018-06-02 17:56:21 -04:00
Tad
ca05b3aca6 Deduplicate 00init.sh 2018-06-02 17:51:18 -04:00
Tad
2fb4b7f5f1 Add option to disable inclusion of microG 2018-06-02 17:37:21 -04:00
Tad
cd98cee42f Update CVE patchers 2018-05-29 14:49:15 -04:00
Tad
ab9487fea1 Tweaks 2018-05-29 13:30:37 -04:00
Tad
fe66b008c0 Changes 2018-05-23 06:25:41 -04:00
Tad
f9f893a443 Hamper the ad/analytics libraries! 2018-05-21 05:28:07 -04:00
Tad
041793dd69 14.1: Drop ether 2018-05-21 04:06:20 -04:00
Tad
67db210756 Many changes
- 15.1: Fixup ether here too
- Change F-Droid application id to allow installation of official F-Droid side by side
- Remove FDroidPriv patch and use sed instead
- Optimize: Switch VM_MAX_READAHEAD to 512KB
- Misc tweaks
- Update TODO
2018-05-20 23:30:40 -04:00
Tad
29e49a5147 Fixup ether 2018-05-20 14:57:54 -04:00
Tad
dfaf44387b Update CVE patchers 2018-05-17 16:42:42 -04:00
Tad
66db536b08 Tweaks 2018-05-16 14:21:20 -04:00
Tad
f30d5cd7f2 Update links 2018-05-13 22:21:42 -04:00
Tad
dd340b087e Deblobber: Use wildcards to remove more blobs 2018-05-11 06:50:57 -04:00
Tad
82896187de Further improve malware scanner 2018-05-11 06:15:29 -04:00
Tad
82758a5303 Improve the malware scanner and enable by default 2018-05-11 02:50:52 -04:00
Tad
5695712cf4 Many changes
- Add support to scan for malware in certain directories
- 15.1: Add new device, griffin
- Note deprecation status of various devices
- Add a few blobs to the deblobber
2018-05-10 23:46:18 -04:00
Tad
966c9c8509 Change connectivity check URLs 2018-05-08 20:56:02 -04:00
Tad
e22d028cbd Switch DNS back to OpenNIC for now 2018-05-08 16:04:41 -04:00
Tad
f5fd480f56 Update CVE patchers 2018-05-07 16:20:58 -04:00
Tad
ee6788df1e Switch from OpenNIC to Cloudflare DNS 2018-05-03 07:38:32 -04:00
Tad
776defd5c3 Tweaks 2018-04-29 00:53:53 -04:00
Tad
8220c2fd11 Prepare potential future inclusion of DNS66 2018-04-28 21:50:06 -04:00
Tad
b30c62629b Revert "Strong AES patch changes"
This reverts commit 60b85e10fe.
2018-04-28 15:35:53 -04:00
Tad
60b85e10fe Strong AES patch changes 2018-04-28 15:25:42 -04:00
Tad
b0ce27b860 Fix building, and temporarily disable some broken defaults 2018-04-28 03:16:35 -04:00
Tad
999c94d2de Update CVE patchers 2018-04-28 00:43:08 -04:00
Tad
ff03ff8fe1 14.1: Verification of changes 2018-04-27 23:49:40 -04:00
Tad
cadba79c51 15.1: Verification of changes 2018-04-27 23:09:52 -04:00
Tad
aadb669450 Change default sounds 2018-04-27 22:26:48 -04:00
Tad
d2c15ac8db Defaults: Cleanup 2018-04-27 22:18:52 -04:00
Tad
3feba464fe Change more defaults 2018-04-27 22:15:04 -04:00
Tad
f433f5389c Fix F-Droid defaults 2018-04-27 01:26:29 -04:00
Tad
791a9a7386 Even more defaults 2018-04-26 01:56:42 -04:00
Tad
06cf4e52ce More defaults 2018-04-25 23:49:50 -04:00
Tad
6f7c21f024 Change many more default settings 2018-04-25 23:38:53 -04:00
Tad
4011255c53 14.1: Fixes 2018-04-25 22:28:42 -04:00
Tad
f122ccb9f1 Many changes
- Disable patches with restrictive licenses by default
- Update LICENSE
- Fixup the fix for F-Droid building
- 15.1: Fix forceencrypt on mako
- 15.1: Fix crashes when accessing factory reset and development settings menus
 on devices without support for factory reset protection or oem unlocking
2018-04-23 15:42:27 -04:00
Tad
02908a652a Terminate all lines 2018-04-23 08:59:18 -04:00
Tad
28600556b4 Many changes
- Add a variable to control inclusion of patches under a restrictive license
- Fix F-Droid building
- Add a buildDeviceDebug function that disables signing
- Misc tweaks/cleanup
- 15.1: Revert trust_interface cherry picks until official
2018-04-23 08:44:50 -04:00
Tad
28de039beb Update CVE patchers 2018-04-22 02:41:18 -04:00
Tad
4b04593376 Fixup de78fb8b9a 2018-04-14 11:30:05 -04:00
Tad
b8937a6400 14.1: Fix herolte, both: replace Gallery2 with CameraRoll 2018-04-14 02:27:01 -04:00
Tad
de78fb8b9a Update CVE patchers 2018-04-13 15:29:21 -04:00
Tad
2289ba2053 15.1: Switch more devices to -user 2018-04-12 23:11:30 -04:00
Tad
1fa75dcb65 15.1: More fixes 2018-04-12 09:26:03 -04:00
Tad
df7979a214 Many changes
- Manifests: Cleanup and remove more repos
- Remove Lineage recovery keys
- 15.1: Switch to 14.1 recovery
- 15.1: Enable recovery updating
- 15.1: d852: fix updater denial
- Misc cleanup
2018-04-12 06:40:10 -04:00
Tad
a914c813b0 15.1: Fixes, 14.1: Cleanup 2018-04-10 19:24:39 -04:00
Tad
7be3f8a556 Many fixes 2018-04-10 00:08:21 -04:00
Tad
f3a92223a5 Fix updater 2018-04-06 21:50:20 -04:00
Tad
fcea2b8d1d Lots of cleanup
- Some overclocks might be missing'
2018-04-06 14:10:43 -04:00
Tad
a661c4cde5 14.1: Drop mako 2018-04-06 13:58:48 -04:00
Tad
fec8fecf5f 14.1: Drop marlin/sailfish 2018-04-06 13:38:55 -04:00
Tad
b2d1b93dcb 14.1: Drop bacon and m8, 15.1: Many more fixes 2018-04-04 21:24:08 -04:00
Tad
f0ab546816 Dramatically deduplicate scripts 2018-04-04 07:52:11 -04:00
Tad
fa2987d3dc 15.1: More fixes and cleanup 2018-04-03 10:56:28 -04:00
Tad
42da60142c 15.1: Many fixes 2018-04-03 09:10:49 -04:00
Tad
c3a3beb907 Update CVE patchers 2018-04-03 06:10:03 -04:00
Tad
e45dd6d45c Remove LOSCoins malware
LineaGenuine is a shitty joke and LOSCoins is proprietary malware

LOSCoins:
- no source available
- source will probably never be available hinted by inc.lineageos package name
- depends on proprietary google play services
- inclues proprietary libraries
- malware
- malware
- malware
2018-04-01 07:07:17 -04:00
Tad
d47c58ba3b Dialer: Simplify disabling lookup 2018-03-31 17:33:49 -04:00
Tad
c3fbff7edd Dialer: Fix disabling lookup 2018-03-31 17:30:50 -04:00
Tad
4f9299f900 Update CVE patchers 2018-03-30 21:47:33 -04:00
Tad
147ab4667e SetupWizard: Switch to our (temp) logo 2018-03-28 16:14:03 -04:00
Tad
8a9cd5c57c SetupWizard: Remove Lineage logo until we can replace it 2018-03-28 01:15:59 -04:00
Tad
e634a22758 14.1: Update default workspaces 2018-03-28 01:07:36 -04:00
Tad
2d8bab800c Many Changes
- Remove more projects via manifests
- Fix FDroidPrivExt inclusion
- 14.1: Remove Jelly
- Remove leftovers from LG G2
2018-03-23 12:37:26 -04:00
Tad
800bd2f985 Move Fennec DOS shim to PrebuiltApps repo 2018-03-23 10:00:33 -04:00
Tad
d9318b61e6 Fix zip name and Fennec DOS shim 2018-03-23 09:37:08 -04:00
Tad
414fa5caa2 Fix zips and buildtype 2018-03-22 09:49:44 -04:00
Tad
e533bc7607 Cleanup 2018-03-22 08:32:01 -04:00
Tad
babc89a079 Update buildtype and .zip prefix 2018-03-22 08:29:40 -04:00
Tad
3ceff683a8 Rebase FDroidPriv patch and cleanup privacy guard changes 2018-03-21 20:50:45 -04:00
Tad
989a494090 Cleanup 2018-03-19 21:28:15 -04:00
Tad
2a1b88cab3 Cleanup 2018-03-18 12:48:08 -04:00
Tad
2155d1ffd2 Add a note about Thor's /misc partition 2018-03-15 23:46:55 -04:00
Tad
f5e2d2dece Many fixes 2018-03-14 14:31:08 -04:00
Tad
e4435f9eac Tweaks and cleanup 2018-03-14 00:41:05 -04:00
Tad
4053ad6082 Initial support for including prebuilt apps from F-Droid
FDroid will come later, microG will probably stay as is.
2018-03-13 23:07:41 -04:00
Tad
ad9f1aa8ce Tweaks 2018-03-12 23:13:50 -04:00
Tad
d111027f4d Many changes
15.1: Update CVE patchers
15.1: Add back automated build signing
14.1: Disable herolte (broken)
14.1: March 2018 Security Bulletin
2018-03-08 22:06:18 -05:00
Tad
9c2272bc03 14.1: Update CVE patchers 2018-03-07 00:07:45 -05:00
Tad
66fd8f57e5 14.1: Drop another device; 15.1: Fix shamu 2018-03-01 10:30:52 -05:00
Tad
eea5b71bd4 14.1: Drop 5 devices supported by 15.1 2018-03-01 09:51:05 -05:00
Tad
601c03df01 Misc fixes 2018-02-28 16:33:29 -05:00
Tad
994a069deb Remove JustArchi's compiler flag optimizations
While some tasks complete slightly faster overall there are too many downsides
- Too large system images
- Weird compiler errors
- Performance regressions on some devices
- General maintenance overhead

Maybe a less aggressive variant can be brought back in the future
2018-02-25 19:56:29 -05:00
Tad
9cdfc59d5e 14.1: Update CVE patchers 2018-02-19 15:01:57 -05:00
Tad
f7abbe151d 15.1: Even more build fixes 2018-02-12 07:28:04 -05:00
Tad
910ee5ad76 15.1: Build fixes 2018-02-12 05:28:24 -05:00
Tad
b02d40974c 15.1: Initial CVE patchers 2018-02-12 04:13:25 -05:00
Tad
3739cfbaa2 Super initial support for LineageOS 15.1 2018-02-11 23:50:18 -05:00
Tad
48d9b9daaa Update CVE patchers and add a helper patch function 2018-02-05 19:21:44 -05:00
Tad
56e5ddba10 Breakout devices broken by -O3 2018-02-01 07:31:25 -05:00
Tad
d3a231e2be Many build fixes
- Deblobber: sh -> bash (potential fix)
- Mark h815 as broken upstream
- Fix h850
- Fix herolte
- Fix Z00T
2018-01-31 13:14:19 -05:00
Tad
0f4e89c4cc Split up buildAll, and mark broken/todo devices there 2018-01-31 07:49:12 -05:00
Tad
d4087bc1e4 Many changes
- Add /misc to thor/apollo
- Remove IR build fix from h815
- Don't dexpreopt i9100, /system is too small
- Add note about -O3 flags breaking devices
- Change SQLite journal mode from PERSIST to TRUNCATE
- Disable flo for now, needs fixes
2018-01-31 07:45:53 -05:00
Tad
f5e79a3d11 Minor tweaks and update CVE patchers 2018-01-30 02:18:38 -05:00
Tad
ed6b73793b Many changes
- Recovery: Squash menus
- dexpreopt boot of all devices
- Update device todo list
2018-01-20 07:36:08 -05:00
Tad
4b5717b6b7 -O3 ALL THE THINGS! Use JustArchi's compiler flags 2018-01-19 05:41:08 -05:00
Tad
1e794178db Misc. updates 2018-01-19 03:14:25 -05:00
Tad
47ae3584a7 Build fixes and update CVE patchers 2018-01-17 17:06:40 -05:00
Tad
e3d6171053 Update CVE patchers 2018-01-16 19:55:07 -05:00
Tad
226f78bd15 Break commonly used commands out into functions 2018-01-15 15:50:29 -05:00
Tad
a84bf140fe Fix thor overclock and clark recovery 2018-01-12 09:26:54 -05:00
Tad
bad18d67fc Improved thor overclocks 2018-01-11 20:39:49 -05:00
Tad
3491639412 Overclock thor 2018-01-11 20:29:37 -05:00
Tad
96104d6a2d Overclock mako 2018-01-11 15:58:04 -05:00
Tad
7ec6b4cf88 Overclocks for msm8992 2018-01-11 15:00:46 -05:00
Tad
77cc7f1341 More overclocks 2018-01-11 14:31:17 -05:00
Tad
6fb82b7907 Attempt to improve AES performance 2018-01-11 14:16:13 -05:00
Tad
8e8c1d5834 Update CVE patchers 2018-01-10 18:29:28 -05:00
Tad
c47dee71d8 Add a function to update the kernel localversion 2018-01-10 17:52:20 -05:00
Tad
f57f77662b Enable AES-256 encryption for most devices 2018-01-10 16:17:20 -05:00
Tad
ffa80a1341 Update CVE patchers 2018-01-10 15:49:48 -05:00
Tad
85895baa66 Update CVE patchers 2018-01-10 15:24:05 -05:00
Tad
97bb50e125 Update CVE patchers 2018-01-10 02:20:35 -05:00
Tad
86234066dc Patch most 3.10 kernels against Spectre 2018-01-04 19:52:32 -05:00
Tad
0600ccd154 Fix animation scale settings being reset to 1x when disabling development options 2018-01-04 17:17:30 -05:00
Tad
a4cde9bb89 Update CVE patchers 2018-01-04 13:34:44 -05:00
Tad
1402e9b041 Update CVE patchers 2018-01-04 13:17:29 -05:00
Tad
e5cbc542ea Misc changes 2018-01-03 21:55:04 -05:00
Tad
9e24a92b89 Build fix 2018-01-03 15:48:18 -05:00
Tad
e918cec33b Fixup 7446b2d304 2018-01-03 13:02:20 -05:00
Tad
eb32600c0b Fix AES256 encryption patch, and update CVE patchers 2018-01-03 12:15:58 -05:00
Tad
7446b2d304 Move enter to functions.sh, and move overclocks to overclock.sh 2018-01-02 20:19:09 -05:00
Tad
a350cd92f1 Patch for AES256 encryption 2018-01-01 14:49:15 -05:00
Tad
d6148bb4df More fixes 2018-01-01 06:19:35 -05:00
Tad
8a4f0bef72 Many changes
- Disable removal of AudioFX blobs, as it breaks audio on some devices
- Enable LG G3 overclocks
- Switch mako from test to release
- Disable force-enabling of GLONASS
2017-12-31 09:09:46 -05:00
Tad
758088bde2 Update CVE patchers 2017-12-30 07:11:23 -05:00
Tad
32dc9af992 Tweaks 2017-12-30 05:44:05 -05:00
Tad
0861d217ae General updated, and LG G3 overclocking 2017-12-30 04:39:32 -05:00
Tad
ef211a5107 Fix flo, update CVE patchers 2017-12-24 10:59:48 -05:00
Tad
f35e6c2779 Add d852 2017-12-22 20:32:56 -05:00
Tad
176d22c6bb Update CVE patchers 2017-12-20 14:29:33 -05:00
Tad
cbe5dc9e9d Add support for LG G2, G3, G4, G5 and update CVE patchers 2017-12-20 13:42:28 -05:00
Tad
d3cf423227 Add a shim to install Fennec DOS 2017-12-19 20:01:17 -05:00
Tad
d740b10822 DNS changes 2017-12-19 17:03:38 -05:00
Tad
ba66e7477c Compile DejaVu 2017-12-19 16:55:30 -05:00
Tad
397ab78e21 Remove some broken patches 2017-12-19 00:18:10 -05:00
Tad
fcc8ffc5bd Tweaks and Fixes 2017-12-15 16:42:36 -05:00
Tad
f65bbb8ee0 Many improvements to the hardenDefconfig function 2017-12-09 13:27:49 -05:00
Tad
07b6c89e07 Fix bootloops with hardened defconfig 2017-12-09 05:52:59 -05:00
Tad
ef401964f7 Improvements 2017-12-09 02:07:54 -05:00
Tad
261563acfc Move functions out of patch.sh and add a kernel hardening function 2017-12-09 01:15:16 -05:00
Tad
4de3a166c4 Remove Android CVE patchers
If a patch affects 4.4.4-8.0, the patch is against 8.0 and will break <8.0
some patches will get backported to older branches others not
Will attempt to automate again later
2017-12-08 23:24:48 -05:00
Tad
2091d44aa3 Add CVE patchers for various Android repos 2017-12-08 23:13:11 -05:00
Tad
8db2dfcde2 Fix patcher paths 2017-12-08 19:29:47 -05:00
Tad
b5c8ef6bc3 Update CVE patchers 2017-12-08 18:59:55 -05:00
Tad
11cc70ef35 Privacy guard improvements and update CVE patchers 2017-12-08 08:18:39 -05:00
Tad
1bd7aab805 Update CVE patchers 2017-12-07 20:20:48 -05:00
Tad
426d32fda5 Update CVE patchers using recoded patcher 2017-12-07 01:04:22 -05:00
Tad
90d7413c04 Update CVE patchers 2017-12-05 19:42:36 -05:00
Tad
3dd9a262df Update CVE patchers with CopperheadOS kernel hardning patches 2017-12-05 18:22:31 -05:00
Tad
8b9bd2ce62 Enable permissionReviewRequired 2017-12-05 11:31:20 -05:00
Tad
dd460da4c3 Build fixes 2017-12-05 11:26:57 -05:00
Tad
face62a675 Fixes 2017-12-04 22:48:33 -05:00
Tad
f93366c8e7 Update CVE patchers 2017-12-04 19:08:04 -05:00
Tad
9bed70363b Update CVE patchers 2017-12-04 18:49:19 -05:00
Tad
dd7454b664 Update CVE patchers 2017-12-01 17:02:23 -05:00
Tad
8e7e492c04 Submodules! 2017-11-28 12:28:55 -05:00
Tad
39337477bf Fixes 2017-11-26 12:43:47 -05:00
Tad
f17b6e477d Update CVE patchers 2017-11-25 19:55:55 -05:00
Tad
c75ac86118 Comments 2017-11-18 08:25:48 -05:00
Tad
557d18a471 Firmware deblobber: Fix mounting /firmware 2017-11-11 09:40:23 -05:00
Tad
5dfb34d47d Inline the firmware deblobber 2017-11-11 06:46:58 -05:00
Tad
fc857876dc Disable Radio power tile for now 2017-11-11 04:32:04 -05:00
Tad
dec73c392c Add a qs tile for controlling radio power 2017-11-10 17:28:44 -05:00
Tad
7d4faa1ef8 More patches 2017-11-10 12:23:07 -05:00
Tad
8ead3072ca Linux incremental patches - little benefit 2017-11-10 04:13:11 -05:00
Tad
1b74baddf0 Patch against towelroot 2017-11-10 03:06:09 -05:00
Tad
d1f4933957 Many fixes 2017-11-09 22:59:37 -05:00
Tad
2711871d50 PAPP: Add more apps 2017-11-09 20:56:11 -05:00
Tad
21fdd3cec7 Defaults fixes and 256 bit encryption 2017-11-09 17:16:55 -05:00
Tad
b84f0881b0 Version the previous USB patches 2017-11-08 13:13:06 -05:00
Tad
7b3c994731 Update CVE patchers 2017-11-08 03:42:33 -05:00
Tad
aaa94329a5 Add more patches 2017-11-08 03:23:39 -05:00
Tad
397e66c977 CVE Build fixes 2017-11-07 23:45:28 -05:00
Tad
93795db152 Update CVE patchers 2017-11-07 23:07:05 -05:00
Tad
09fac4ca19 Update CVE patchers 2017-11-07 22:09:45 -05:00
Tad
7c0049f494 Update CVE patchers 2017-11-07 21:54:21 -05:00
Tad
3a5e68f927 Update patchers 2017-11-07 20:35:49 -05:00
Tad
fc6fc0f96e Rewrite CVE patchers 2017-11-07 20:11:50 -05:00
Tad
8ed308c888 Update CVE pathcers against new patches 2017-11-07 20:00:37 -05:00
Tad
7da9d77ed3 Patcher updates 2017-11-07 19:12:41 -05:00
Tad
529ce03a13 Fixup wireless patches 2017-11-07 18:55:10 -05:00
Tad
58be4b7c58 Add an extremely detailed list of Linux CVE patches
It only took 7 hours!
2017-11-07 04:35:41 -05:00
Tad
10686a9480 More LAOS-11.0 fixes 2017-11-06 17:15:01 -05:00
Tad
5bc79a7ad7 Restore nex/11.0 and cleanup 2017-11-06 15:34:40 -05:00
Tad
db7f521c28 Update FDroid repos 2017-11-05 23:19:53 -05:00
Tad
848056f0ff Remove more blobs, update FDroid repos 2017-11-05 18:39:54 -05:00
Tad
112384f039 Fixes 2017-11-05 16:49:52 -05:00
Tad
d2b8412b97 Add a script for changing default settings 2017-11-05 16:40:21 -05:00
Tad
a6d3a9c9f2 Remove a few more blobs 2017-11-05 14:30:15 -05:00
Tad
e0c764492d Add CVE patchers and commands for new devices 2017-11-05 14:15:54 -05:00
Tad
a42e8a5243 Add initial support for 7 more devices 2017-11-05 13:56:37 -05:00
Tad
7ffb675a15 Licensing fixes, and misc fixes 2017-11-05 10:58:01 -05:00
Tad
1e761ace58 Tweak FDroid defaults 2017-11-04 20:00:07 -04:00
Tad
d636b7c598 Many fixes 2017-11-04 16:56:52 -04:00
Tad
b1b71f43c6 Replace wallpapers with out own better ones, Replace FDroid repo patch with just the file instead 2017-11-04 09:47:54 -04:00
Tad
f5e96522e1 Fixes 2017-11-02 19:35:27 -04:00
Tad
5cce7e4c37 Add CVE patcher for nex 2017-11-02 19:09:39 -04:00
Tad
6cb184876a More KRACK patches 2017-11-02 16:48:37 -04:00
Tad
c3c75e7b73 Revert "CVE Patchers: Switch to 3way, patch ~552 CVEs"
This reverts commit 7d24041ae3.

A quick sanity check against cve.lineageos.org shows most of these are patched already.
--3way == bad way
2017-11-02 16:01:55 -04:00
Tad
7d24041ae3 CVE Patchers: Switch to 3way, patch ~552 CVEs
I hope this doesn't break compile... it probably will and this will end up reverted :(
2017-11-02 15:57:46 -04:00
Tad
79daadb5ef Update CVE patchers for ranged versions, patching 1 CVE 2017-11-02 15:26:49 -04:00
Tad
7c31506e56 CVE Patches: ranged versions 2017-11-02 15:07:05 -04:00
Tad
f638b1434e Fixes 2017-10-31 14:06:04 -04:00
Tad
43e4a7035d Patch 30 more CVEs 2017-10-31 13:44:26 -04:00
Tad
77fc7b452c Fix empty CVE patches 2017-10-31 13:24:35 -04:00
Tad
9a09d20695 Disable patch for CVE-2016-0819 2017-10-30 22:46:23 -04:00
Tad
64d490d95e Remove network hardening patches, disable mako LTE patch, add function to enable forceencrypt 2017-10-30 17:38:00 -04:00
Tad
53ae1c8103 Simplify script paths 2017-10-30 01:30:10 -04:00
Tad
41b11b0273 Fully patch against KRACK 2017-10-30 01:13:51 -04:00
Tad
3afd709762 Remove duplicate cve patches and update CVE patchers 2017-10-29 22:33:38 -04:00
Tad
3989a1b20b Update Linux CVE patches 2017-10-29 22:14:37 -04:00
Tad
12b63c12b7 Remove some duplicate CVE patches and add back fixed CVE patcher scripts 2017-10-29 21:26:04 -04:00
Tad
e1a0ab6afd Fixes 2017-10-29 21:10:36 -04:00
Tad
548fbd1b50 New patchers 2017-10-29 16:25:37 -04:00
Tad
92a0187dfb Overhaul CVE patches 2017-10-29 14:23:02 -04:00
Tad
ce59045163 Add some more Linux CVE patches 2017-10-29 04:19:13 -04:00
Tad
86c2d7a648 Remove many duplicate linux CVE patches and update patchers 2017-10-29 03:46:24 -04:00
Tad
3376142301 Fixes 2017-10-29 02:43:38 -04:00
Tad
f5425a4c97 More tweaks, add many scripts for patching kernel cves 2017-10-29 02:21:16 -04:00
Tad
75099b9404 Add patches for many Linux CVEs, and overhaul script paths 2017-10-29 01:48:53 -04:00