Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,231 Commits 1 Branch 0 Tags 101 MiB
83b8410de8
Commit Graph

317 Commits

Author SHA1 Message Date
Tad
548aec9c9d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-11-05 18:58:11 -05:00
Tad
01e41a26f6
19.1+: Reduce EXIF metadata in screenshots, thanks to CalyxOS 
546fd13c6f

Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/263

Signed-off-by: Tad <tad@spotco.us>
 2023-10-20 18:54:01 -04:00
Tad
90979e494c
Updater: point the changelog button to our news page 
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/257

Signed-off-by: Tad <tad@spotco.us>
 2023-10-20 18:44:05 -04:00
Tad
f64285f6fd
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-15 21:06:16 -04:00
Tad
d90bcb8ad3
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-09 16:42:50 -04:00
Tad
7b54b4459c
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-08 15:10:59 -04:00
Tad
c05be35867
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-07 17:10:36 -04:00
Tad
7d2c184d1f
Bonus patches 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-03 15:17:06 -04:00
Tad
d80f272b54
Update CVE patchers 
CVE-2023-4128 replaces CVE-2023-4208

Signed-off-by: Tad <tad@spotco.us>
 2023-10-02 21:41:34 -04:00
Tad
fcf4f812cc
CVE-2023-5217 
untested

Signed-off-by: Tad <tad@spotco.us>
 2023-09-28 09:17:29 -04:00
Tad
5250942b4b
Attempt to fix nile 
Something changed between August 10th and September 6th update which broke boot
These are all the functional changes made to the kernel.
Rest were Xen or vmxnet related.
Other 4.9 to 4.4 replacements were double checked and ruled out.

Signed-off-by: Tad <tad@spotco.us>
 2023-09-26 15:16:26 -04:00
Tad
19f4964036
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-21 16:52:35 -04:00
Tad
b39b2f2feb
Churn + Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-21 16:12:28 -04:00
Tad
724b742b64
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-18 15:34:11 -04:00
Tad
337ae6012d
Fixup 
TODO: regen

Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 20:26:44 -04:00
Tad
ab69e235dd
Update picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:32:28 -04:00
Tad
968676650e
Update picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:32:03 -04:00
Tad
1b4f6d3bd8
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:30:23 -04:00
Tad
cbf76ea4eb
18.1+: patch CVE-2023-4863 
TODO:
- 17.1 uses v1.0.2, needs backport
  patch for v1.0.3: 8d9916da90

Signed-off-by: Tad <tad@spotco.us>
 2023-09-15 14:38:14 -04:00
Tad
6e5745143f
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-08 20:00:23 -04:00
Tad
0ec3c25d86
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-05 20:42:14 -04:00
Tad
fc9032513f
Update CVE patchers 
Likely issue CVE-2023-3773/^6.4

Signed-off-by: Tad <tad@spotco.us>
 2023-08-27 17:13:53 -04:00
Tad
7835c2b2ae
18.1+: Restrict tile usage when locked, credit @GrapheneOS 
TODO: backport to older branches

Signed-off-by: Tad <tad@spotco.us>
 2023-08-22 17:54:19 -04:00
Tad
0afe05ff22
Push apollon to 20.0 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-18 12:36:18 -04:00
Tad
ceec1584a9
Fixup hosts cache thanks to patch from @danielk43 
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/198

Signed-off-by: Tad <tad@spotco.us>
 2023-08-18 11:17:14 -04:00
Tad
2142e2e763
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-17 17:18:10 -04:00
Tad
9707326c4f
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-13 16:16:21 -04:00
Tad
160aee5049
Backport patch to handle verity with openssl 3.0 
ref: https://github.com/Divested-Mobile/DivestOS-Website/pull/19

Signed-off-by: Tad <tad@spotco.us>
 2023-08-11 18:53:01 -04:00
Tad
974878988b
Fixup 
Will regen later

Signed-off-by: Tad <tad@spotco.us>
 2023-08-09 00:46:44 -04:00
Tad
067c50a81d
Cherrypicks 
ca-cert picks are ignored as we already use the mainline repo

Signed-off-by: Tad <tad@spotco.us>
 2023-08-08 05:05:34 -04:00
Tad
eef09ae519
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-07 18:07:19 -04:00
Tad
180280b233
Update CVE patchers 
TODO: adjust min version of CVE-2023-4132

Signed-off-by: Tad <tad@spotco.us>
 2023-08-04 21:00:29 -04:00
Tad
7b7d5b93dd
Adjust 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-27 13:43:06 -04:00
Tad
73414e76d2
Update CVE patchers 
two lpes

Signed-off-by: Tad <tad@spotco.us>
 2023-07-25 12:04:05 -04:00
Tad
e74f861c8e
Fixes + Churn 
- Fix instances of awk failing on missing globs
- Remove unwanted packages from work/user/managed profiles
- Remove proprietary camera extensions

Signed-off-by: Tad <tad@spotco.us>
 2023-07-24 03:59:51 -04:00
Tad
e408e7e19a
Drop devices with newer versions available 
14.1: clark
15.1: deb, flo, hammerhead, shamu, ether
16.0: hammerhead
19.1: alioth

Signed-off-by: Tad <tad@spotco.us>
 2023-07-22 19:17:42 -04:00
Tad
7cf9292553
19.1: Restore GOS camera, accidentally removed 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-22 14:34:10 -04:00
Tad
0f9a2c7aea
Less aggressive low_ram enablement 
14.1 <2GB
15.1 <2GB
16.0 <2GB
17.1 <3GB
18.1 <3GB
19.1 <4GB
20.0 <4GB

Signed-off-by: Tad <tad@spotco.us>
 2023-07-17 18:44:56 -04:00
Tad
b6308caa37
Update CVE patchers 
TODO: enable CVE-2023-31084/4.4

Signed-off-by: Tad <tad@spotco.us>
 2023-07-15 21:22:18 -04:00
Tad
aa6bfad801
Various 
- Drop OpenCamera, it doesn't work on lock screens anymore?
- microG on 18.1+:
  - set packages forceQueryable
  - spoof some sources as Play Store
    TODO: backport this to 17.1
- Remove camera extensions
- Churn
- Wording

Signed-off-by: Tad <tad@spotco.us>
 2023-07-15 18:22:07 -04:00
Tad
192c73146a
Add a toggle for KSM 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-14 17:11:21 -04:00
Tad
b5bb498248
Many tweaks 
- 19.1/20.0: Enable low ram for <6GB devices
- 20.0: support RROs with exec spawning patch from GrapheneOS
- allow work profiles when low ram is enabled
- churn
- cherrypicks

Signed-off-by: Tad <tad@spotco.us>
 2023-07-13 16:40:05 -04:00
Tad
eff7a69bed
Small changes 
- Another fix
- Deblobber tweaks
- Patch from GrapheneOS
- Cherrypick

Signed-off-by: Tad <tad@spotco.us>
 2023-07-13 10:58:41 -04:00
Tad
2651f33e5c
ASB cherrypicks 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-07 13:44:00 -04:00
Tad
a1a3cbb94e
Fix overlay conflicts 
Should mostly fix https://github.com/Divested-Mobile/DivestOS-Build/issues/219

Signed-off-by: Tad <tad@spotco.us>
 2023-07-06 14:51:40 -04:00
Tad
c4666a33b7
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-05 19:42:40 -04:00
Tad
a96f74ca28
Enable the opt-in unprivileged microG enablement patchset 
Runtime tested: 17.1, 18.1, 20.0
Compile tested: 19.1

Signed-off-by: Tad <tad@spotco.us>
 2023-07-03 21:50:08 -04:00
Tad
4282c7c35f
Backports of 0f4044e2 to 17.1/18.1/19.1 
Also don't grant any special location permissions

Signed-off-by: Tad <tad@spotco.us>
 2023-07-03 15:17:56 -04:00
Tad
2e2ac4557d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-26 19:41:11 -04:00
Tad
cda898f141
Certificate Authority store updates 
- Remove some untrustworthy CAs
- Update CA store for all branches to aosp/e302aa968334b3c3fc9cd709a7c7661e0cf534eb

Signed-off-by: Tad <tad@spotco.us>
 2023-06-17 15:13:54 -04:00
Tad
41e2669884
17.1: switch to flamefire's ASB topics 
This gets us ~9 extra patches

Signed-off-by: Tad <tad@spotco.us>
 2023-06-17 15:13:46 -04:00
Tad
a07133a064
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-16 11:03:46 -04:00
Tad
ee534ada7f
20.0: bringup lmi/alioth 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-14 22:04:04 -04:00
Tad
78fa476749
Churn + Fixes 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-09 16:19:07 -04:00
Tad
04b4a1a45f
Picks + Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-08 22:48:40 -04:00
Tad
2ee99fe3ef
Update CVE patchers 
CVE-2020-36694 appears to be a duplicate of CVE-2021-29650

Signed-off-by: Tad <tad@spotco.us>
 2023-06-01 21:12:08 -04:00
Tad
8463705798
Update CVE patchers 
- Includes CVE-2023-32233 fixes for more devices
- Upstream has reverted the LVT patches, maybe consider handling them

Signed-off-by: Tad <tad@spotco.us>
 2023-05-22 20:33:47 -04:00
Tad
71c169d326
Promote LGE G5, G6, and V20 to 19.1 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-17 02:52:11 -04:00
Tad
cd0a29d69b
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-12 23:28:44 -04:00
Tad
1a203ab5ad
Nine device additions 
20.0:
	- akatsuki
	- lemonades
	- dipper, equuleus, polaris, ursa

19.1:
	- kirin, mermaid
	- apollon

note lemonades is failing like kebab:
> Sum of sizes in oneplus_dynamic_partitions_partition_list is 3765178368, which is greater than oneplus_dynamic_partitions_size (3753902080)

Signed-off-by: Tad <tad@spotco.us>
 2023-05-09 02:48:56 -04:00
Tad
0004c224cf
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-06 00:15:27 -04:00
Tad
6d2a255eef
Remove User-Agent (and serial) from source built libloc 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-05 22:27:27 -04:00
Tad
e4abf9aeab
Drop picks 
Merged upstream

Signed-off-by: Tad <tad@spotco.us>
 2023-05-03 21:45:47 -04:00
Tad
c544c28b94
Prevent Qualcomm location stack from reading chipset serial number 
The deblobber already removes xtra-daemon which is what actually performs the requests.
This is just extra sanctity.

Signed-off-by: Tad <tad@spotco.us>
 2023-05-03 21:41:20 -04:00
Tad
366b4eb5ef
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-02 18:01:39 -04:00
Tad
3f40c8fb7c
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-02 17:09:25 -04:00
Tad
39b0c9e036
Remove broken emoji updates 
Signed-off-by: Tad <tad@spotco.us>
 2023-05-02 15:31:57 -04:00
Tad
7b2eb1079a
Update emoji list in LatinIME too and disable 
tested not working on 15.1
shows as cross boxes or double characters

Signed-off-by: Tad <tad@spotco.us>
 2023-04-29 16:56:13 -04:00
Tad
86b7525400
Update the emojis, untested 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-29 16:17:00 -04:00
Tad
47136145e5
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-23 23:20:36 -04:00
Tad
9ba61642de
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-17 23:19:28 -04:00
Tad
7263a6fd6e
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-17 12:27:05 -04:00
Tad
a3807ca12d
Picks + churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-12 20:47:31 -04:00
Tad
2cc87c4dc7
Switch fingerprint locked to 5 attempts instead of 3 + churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-12 15:26:26 -04:00
Tad
9a97c7013b
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-04-05 12:43:36 -04:00
Tad
4435c200ed
15.1+: vCard 4.0 support from GrapheneOS 
8fbeedd002

Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/202

Signed-off-by: Tad <tad@spotco.us>
 2023-04-04 12:50:42 -04:00
Tad
750f244304
Updates, logging, and churn 
also add an extra March ASB patch for 17.1

Signed-off-by: Tad <tad@spotco.us>
 2023-03-31 12:38:46 -04:00
Tad
ca93ef33ce
Slightly improve compatibility with apps that want GSF 
38a5ca05e9

Signed-off-by: Tad <tad@spotco.us>
 2023-03-28 23:45:58 -04:00
Tad
2907be1be5
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-28 00:48:08 -04:00
Tad
08e7644c74
More drops 
drop 19.1 cheryl, compiling on 20.0 and no users on 19.1

Signed-off-by: Tad <tad@spotco.us>
 2023-03-25 22:45:10 -04:00
Tad
fe80137df9
Don't remove CompanionDeviceManager 
Used by some wearables, not just Android Wear

Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/196

Signed-off-by: Tad <tad@spotco.us>
 2023-03-25 20:21:38 -04:00
Tad
61a3892314
Drop devices working on 20.0 
Removes:
- 19.1: mata and FP3
- 17.1: avicii

all above tested/reported working on 20.0

Signed-off-by: Tad <tad@spotco.us>
 2023-03-25 17:04:25 -04:00
Tad
472ec96915
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-22 16:23:26 -04:00
Tad
b4dbe27f23
Fixes 
- 18.1: Fix exempted background tasks when dozing (GrapheneOS)
- 20.0: pick a fix for some colors after qpr2
- 20.0: fix the missing notification backdrop

Signed-off-by: Tad <tad@spotco.us>
 2023-03-20 17:51:09 -04:00
Tad
ec38522af9
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-18 20:52:59 -04:00
Tad
d261ab1107
Updates 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-17 19:27:37 -04:00
Tad
8bcb5c734d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-17 19:27:22 -04:00
Tad
162b40a39d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-13 18:13:54 -04:00
Tad
ef2fdb1d3e
More handling improvements 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 16:14:51 -05:00
Tad
0b294c1601
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 16:01:49 -05:00
Tad
5d0ab40f0b
Robustness improvements 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 01:14:06 -05:00
Tad
6ba784ac33
Some actual error handling 1/n 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-08 00:03:23 -05:00
Tad
097019193e
Don't bail when devices are missing 
Signed-off-by: Tad <tad@spotco.us>
 2023-03-07 23:41:27 -05:00
Tad
804786aa23
Update CVE patchers 
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/193

Signed-off-by: Tad <tad@spotco.us>
 2023-03-06 19:54:15 -05:00
Tad
b8f39716f1
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-26 12:21:36 -05:00
Tad
b08bf0356f
Small additions + churn 
- 18.1+: Disable NTP fully when automatic time is off, credit GrapheneOS
- 20.0: Handle Tor-over-Orbot when killswitch enabled, credit CalyxOS, BROKEN

Signed-off-by: Tad <tad@spotco.us>
 2023-02-18 13:52:46 -05:00
Tad
9f82763c53
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-17 23:57:04 -05:00
Tad
a845f59546
Fixup persistent IPv6 privacy address issue + churn 
Backports of rfc4941bis from Google/Linaro
and workaround for legacy kernels from GrapheneOS

already has rfc4941bis patch:
fairphone_sdm632
google_gs101
google_gs201
google_msm-4.14
google_msm-4.9
google_redbull
oneplus_sdm845
razer_sdm845
xiaomi_sdm845

Signed-off-by: Tad <tad@spotco.us>
 2023-02-11 20:26:24 -05:00
Tad
49f5f1c674
19.1+: Add the SUPL toggle setting from GrapheneOS 
Will need some work to apply on 17.1/18.1

Signed-off-by: Tad <tad@spotco.us>
 2023-02-10 23:57:04 -05:00
Tad
fa067a3f89
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-02-06 23:06:34 -05:00