Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,088 Commits 1 Branch 0 Tags 101 MiB
90979e494c
Commit Graph

265 Commits

Author SHA1 Message Date
Tad
90979e494c
Updater: point the changelog button to our news page 
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/257

Signed-off-by: Tad <tad@spotco.us>
 2023-10-20 18:44:05 -04:00
Tad
f64285f6fd
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-15 21:06:16 -04:00
Tad
d90bcb8ad3
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-09 16:42:50 -04:00
Tad
7b54b4459c
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-08 15:10:59 -04:00
Tad
c05be35867
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-07 17:10:36 -04:00
Tad
7d2c184d1f
Bonus patches 
Signed-off-by: Tad <tad@spotco.us>
 2023-10-03 15:17:06 -04:00
Tad
d80f272b54
Update CVE patchers 
CVE-2023-4128 replaces CVE-2023-4208

Signed-off-by: Tad <tad@spotco.us>
 2023-10-02 21:41:34 -04:00
Tad
fcf4f812cc
CVE-2023-5217 
untested

Signed-off-by: Tad <tad@spotco.us>
 2023-09-28 09:17:29 -04:00
Tad
5250942b4b
Attempt to fix nile 
Something changed between August 10th and September 6th update which broke boot
These are all the functional changes made to the kernel.
Rest were Xen or vmxnet related.
Other 4.9 to 4.4 replacements were double checked and ruled out.

Signed-off-by: Tad <tad@spotco.us>
 2023-09-26 15:16:26 -04:00
Tad
19f4964036
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-21 16:52:35 -04:00
Tad
b39b2f2feb
Churn + Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-21 16:12:28 -04:00
Tad
724b742b64
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-18 15:34:11 -04:00
Tad
337ae6012d
Fixup 
TODO: regen

Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 20:26:44 -04:00
Tad
ab69e235dd
Update picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:32:28 -04:00
Tad
968676650e
Update picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:32:03 -04:00
Tad
1b4f6d3bd8
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-17 01:30:23 -04:00
Tad
cbf76ea4eb
18.1+: patch CVE-2023-4863 
TODO:
- 17.1 uses v1.0.2, needs backport
  patch for v1.0.3: 8d9916da90

Signed-off-by: Tad <tad@spotco.us>
 2023-09-15 14:38:14 -04:00
Tad
6e5745143f
Picks 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-08 20:00:23 -04:00
Tad
0ec3c25d86
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-09-05 20:42:14 -04:00
Tad
fc9032513f
Update CVE patchers 
Likely issue CVE-2023-3773/^6.4

Signed-off-by: Tad <tad@spotco.us>
 2023-08-27 17:13:53 -04:00
Tad
7835c2b2ae
18.1+: Restrict tile usage when locked, credit @GrapheneOS 
TODO: backport to older branches

Signed-off-by: Tad <tad@spotco.us>
 2023-08-22 17:54:19 -04:00
Tad
0afe05ff22
Push apollon to 20.0 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-18 12:36:18 -04:00
Tad
ceec1584a9
Fixup hosts cache thanks to patch from @danielk43 
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/198

Signed-off-by: Tad <tad@spotco.us>
 2023-08-18 11:17:14 -04:00
Tad
2142e2e763
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-17 17:18:10 -04:00
Tad
9707326c4f
Churn 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-13 16:16:21 -04:00
Tad
160aee5049
Backport patch to handle verity with openssl 3.0 
ref: https://github.com/Divested-Mobile/DivestOS-Website/pull/19

Signed-off-by: Tad <tad@spotco.us>
 2023-08-11 18:53:01 -04:00
Tad
974878988b
Fixup 
Will regen later

Signed-off-by: Tad <tad@spotco.us>
 2023-08-09 00:46:44 -04:00
Tad
067c50a81d
Cherrypicks 
ca-cert picks are ignored as we already use the mainline repo

Signed-off-by: Tad <tad@spotco.us>
 2023-08-08 05:05:34 -04:00
Tad
eef09ae519
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-08-07 18:07:19 -04:00
Tad
180280b233
Update CVE patchers 
TODO: adjust min version of CVE-2023-4132

Signed-off-by: Tad <tad@spotco.us>
 2023-08-04 21:00:29 -04:00
Tad
7b7d5b93dd
Adjust 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-27 13:43:06 -04:00
Tad
73414e76d2
Update CVE patchers 
two lpes

Signed-off-by: Tad <tad@spotco.us>
 2023-07-25 12:04:05 -04:00
Tad
e74f861c8e
Fixes + Churn 
- Fix instances of awk failing on missing globs
- Remove unwanted packages from work/user/managed profiles
- Remove proprietary camera extensions

Signed-off-by: Tad <tad@spotco.us>
 2023-07-24 03:59:51 -04:00
Tad
e408e7e19a
Drop devices with newer versions available 
14.1: clark
15.1: deb, flo, hammerhead, shamu, ether
16.0: hammerhead
19.1: alioth

Signed-off-by: Tad <tad@spotco.us>
 2023-07-22 19:17:42 -04:00
Tad
7cf9292553
19.1: Restore GOS camera, accidentally removed 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-22 14:34:10 -04:00
Tad
0f9a2c7aea
Less aggressive low_ram enablement 
14.1 <2GB
15.1 <2GB
16.0 <2GB
17.1 <3GB
18.1 <3GB
19.1 <4GB
20.0 <4GB

Signed-off-by: Tad <tad@spotco.us>
 2023-07-17 18:44:56 -04:00
Tad
b6308caa37
Update CVE patchers 
TODO: enable CVE-2023-31084/4.4

Signed-off-by: Tad <tad@spotco.us>
 2023-07-15 21:22:18 -04:00
Tad
aa6bfad801
Various 
- Drop OpenCamera, it doesn't work on lock screens anymore?
- microG on 18.1+:
  - set packages forceQueryable
  - spoof some sources as Play Store
    TODO: backport this to 17.1
- Remove camera extensions
- Churn
- Wording

Signed-off-by: Tad <tad@spotco.us>
 2023-07-15 18:22:07 -04:00
Tad
192c73146a
Add a toggle for KSM 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-14 17:11:21 -04:00
Tad
b5bb498248
Many tweaks 
- 19.1/20.0: Enable low ram for <6GB devices
- 20.0: support RROs with exec spawning patch from GrapheneOS
- allow work profiles when low ram is enabled
- churn
- cherrypicks

Signed-off-by: Tad <tad@spotco.us>
 2023-07-13 16:40:05 -04:00
Tad
eff7a69bed
Small changes 
- Another fix
- Deblobber tweaks
- Patch from GrapheneOS
- Cherrypick

Signed-off-by: Tad <tad@spotco.us>
 2023-07-13 10:58:41 -04:00
Tad
2651f33e5c
ASB cherrypicks 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-07 13:44:00 -04:00
Tad
a1a3cbb94e
Fix overlay conflicts 
Should mostly fix https://github.com/Divested-Mobile/DivestOS-Build/issues/219

Signed-off-by: Tad <tad@spotco.us>
 2023-07-06 14:51:40 -04:00
Tad
c4666a33b7
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-07-05 19:42:40 -04:00
Tad
a96f74ca28
Enable the opt-in unprivileged microG enablement patchset 
Runtime tested: 17.1, 18.1, 20.0
Compile tested: 19.1

Signed-off-by: Tad <tad@spotco.us>
 2023-07-03 21:50:08 -04:00
Tad
4282c7c35f
Backports of 0f4044e2 to 17.1/18.1/19.1 
Also don't grant any special location permissions

Signed-off-by: Tad <tad@spotco.us>
 2023-07-03 15:17:56 -04:00
Tad
2e2ac4557d
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-26 19:41:11 -04:00
Tad
cda898f141
Certificate Authority store updates 
- Remove some untrustworthy CAs
- Update CA store for all branches to aosp/e302aa968334b3c3fc9cd709a7c7661e0cf534eb

Signed-off-by: Tad <tad@spotco.us>
 2023-06-17 15:13:54 -04:00
Tad
41e2669884
17.1: switch to flamefire's ASB topics 
This gets us ~9 extra patches

Signed-off-by: Tad <tad@spotco.us>
 2023-06-17 15:13:46 -04:00
Tad
a07133a064
Update CVE patchers 
Signed-off-by: Tad <tad@spotco.us>
 2023-06-16 11:03:46 -04:00