Tad
e10a865b05
Improve release processing to support deltas and archiving
2019-08-29 19:09:31 -04:00
Tad
057bedb65b
Minor tweaks
...
- 14.1+15.1+16.0: enable kernel protections for files
- protected_*: hardlinks, symlinks, fifos, regular
- from GrapheneOS
- defconfig: enable more verity options
- cleanup
2019-08-28 20:24:59 -04:00
Tad
db348ab09c
Minor tweaks
...
- 15.1+16.0: Replace in-line build signing patch with bash function
- From GrapheneOS/script
- 15.1+16.0: Enable fingerprint failed lockout after 5 attempts
- From GrapheneOS
2019-08-28 00:40:27 -04:00
Tad
68cdef8733
Minor tweaks
2019-08-26 20:50:28 -04:00
Tad
89de66bdba
Many small changes
...
- Cherrypicks for ASB patches
- Apps: Switch gallery to Simple Gallery
- Apps: Switch camera to OpenCamera
- PKGBUILD: update with image optimization dependencies
- Deblobber: fix bug introducted in 6d33e4ecbf
2019-08-08 14:22:24 -04:00
Tad
aee6b66dd8
Update CVE patchers
2019-08-05 16:03:41 -04:00
Tad
bad890614e
Update CVE patchers
2019-07-21 09:47:10 -04:00
Tad
34d1bbe155
Minor updates
2019-07-21 07:36:02 -04:00
Tad
6458d6785f
Enable IPv6 privacy extensions
2019-07-05 16:47:59 -04:00
Tad
a29825f6e1
Update CVE patchers
2019-07-01 18:06:05 -04:00
Tad
e41d053f00
Minor updates
...
- drop usage stats patch, causes Settings to crash
2019-06-27 23:01:28 -04:00
Tad
55c3072089
Going the distance... [pt2]
2019-06-18 13:51:04 -04:00
Tad
c15105d945
Update CVE patchers
2019-06-17 23:26:38 -04:00
Tad
1d67143181
Update CVE patchers
2019-06-08 04:09:24 -04:00
Tad
d7078bafd6
Update CVE patchers
2019-06-03 18:41:24 -04:00
Tad
bb72bccbeb
Two hardening patches from @MSe1969
...
+ a backport of browser location restriction patch to 14.1 and 15.1
by @syphyr
2019-06-02 19:25:29 -04:00
Tad
163fdb1f68
Minor updates
2019-05-31 21:13:39 -04:00
Tad
40d6db0326
divestos.xyz > divestos.org
2019-05-23 11:34:26 -04:00
Tad
8030a63a2a
11.0: fixes
2019-05-17 23:26:25 -04:00
Tad
380353773e
Fixes
2019-05-17 20:48:26 -04:00
Tad
899812864f
Update CVE patchers
2019-05-14 21:04:55 -04:00
Tad
223c5d1a2c
Disable temperature monitoring
...
Breaks boot after 9.0 May security ASB:
- thermal service unavailable
- power service hooks thermal service
- keyguard service hooks power service
- no keyguard = no system ui
- no system ui = rescue party engages
- rescue party goes into recovery demanding factory wipe
see commit:
fwb: DO NOT MERGE Implement USB High Temperature warning dialog
2019-05-12 13:42:06 -04:00
Tad
aaa44f058e
Update license
2019-05-09 06:43:09 -04:00
Tad
f59c77f00c
Cherrypicks
2019-05-06 16:29:58 -04:00
Tad
9e2dd548d8
Disable LiveDisplay by default for performance reasons
2019-04-17 00:23:42 -04:00
Tad
20c8c7525c
Misc tweaks
...
- 15.1: Contacts: remove Privacy Policy and Terms of Service links
- from GrapheneOS
- cherry picks
2019-04-06 22:55:14 -04:00
Tad
974cc3b3f8
16.0: recovery has been updated
...
but leave it disabled because it doesn't boot
2019-04-04 23:33:10 -04:00
Tad
25cc717ec2
Use GrapheneOS' hardened memory allocator
...
+ 16.0: some other misc hardening patches from GrapheneOS
- always restrict access to Build.SERIAL
- don't grant location permission to system browsers
- fbe: pad filenames more
+ 16.0: Contacts: remove Privacy Policy and Terms of Service links
2019-04-04 01:07:58 -04:00
Tad
60cf364f19
Minor tweaks
...
- init.sh: sort options
- overlay: leave radioScanningTimeout default
- hardenDefconfig: disable more components with CVEs
- cherry picks
- 16.0: trebuchet: tmp fix for default workspace overlay
2019-04-03 19:04:37 -04:00
Tad
1c49b80da0
Minor tweaks
...
- CVE patchers were updated with no change
- hardenDefconfig: disable MSM_SMP2P_TEST to mitigate CVE-2019-2247
- 14.1 add a cherry pick
2019-04-01 18:57:04 -04:00
Tad
dd7e4c3faf
Remove more blobs
2019-03-22 05:28:57 -04:00
Tad
e344b17a36
Build fixes + new blob blocker
2019-03-22 04:20:06 -04:00
Tad
23f8759937
Remove some unneeded packages
2019-03-12 20:40:31 -04:00
Tad
cfe766be09
Tweaks
2019-03-11 18:19:50 -04:00
Tad
b1455b641d
Update CVE patchers
2019-03-08 15:15:46 -05:00
Tad
5607db2e0b
Update CVE patchers
...
- More aggressively attempt to apply incremental patches by
ignoring the current subversion, as it is common for it to be 0
Hopefully I won't have to revert this
2019-03-04 21:41:55 -05:00
Tad
9e897989d1
Update CVE patchers
2019-03-04 20:18:29 -05:00
Tad
f5d99c938b
16.0: More bringup
2019-03-04 05:53:51 -05:00
Tad
afe719ffc4
16.0: Initial bringup
...
- 14.1/15.1: Remove @ValdikSS' bluetooth patches
- 15.1: Cleanup
2019-03-04 02:45:54 -05:00
Tad
83478880ef
WireGuard kernel module inclusion support
2019-03-04 00:06:22 -05:00
Tad
bc63feedc9
Update CVE patchers
2019-02-21 06:25:47 -05:00
Tad
fccc124868
tuna fixes + fdroid priv changes
2019-02-14 04:36:50 -05:00
Tad
b9ff7a74e6
Updates and fixes
2019-02-12 16:09:41 -05:00
Tad
ffabfb3616
14.1: fix maguro denials
2019-02-09 14:47:55 -05:00
Tad
9178760d1a
Updater: Fix downloads over Tor
...
+ Update TODO
+ Minor tweaks
2019-02-08 20:58:15 -05:00
Tad
aa9b5499e6
Updates
2019-02-07 11:15:29 -05:00
Tad
15237becbb
Update CVE patchers
2019-02-04 16:03:59 -05:00
Tad
378971497c
14.1: Support unified tuna
2019-02-01 02:53:13 -05:00
Tad
0ea1d37f0c
Minor changes
...
- Update cherrypicks
- Update submodules
- Add some comments
2019-01-28 21:54:45 -05:00
Tad
ec3ffa38f2
Fixup CVE patchers
2019-01-07 19:42:25 -05:00
Tad
d8aac4c07b
Update CVE patchers
2019-01-07 17:07:00 -05:00
Tad
c27f226269
Properly fix network mode patch
2018-12-29 12:19:27 -05:00
Tad
66a38a4705
Fixup network modes patch on 14.1
2018-12-28 14:53:23 -05:00
Tad
0df749ef73
Add more preferred network modes such as LTE Only, LTE/3G only, and 3G only
2018-12-28 08:02:24 -05:00
Tad
c07027dd97
Many changes
...
- Update CVE patchers
- Update submodules
- Update defconfig enablers
- Update DNS IP addresses
- + Misc changes
2018-12-24 23:29:56 -05:00
Tad
6c4eadcdc7
Manifest cleanup + always remove latemount from /cache
...
formatting/erasing /cache will result in selinux contexts being lost
these are normally restored by system/core/rootdir/init.rc in post-fs
but latemount causes /cache to not be mounted beforehand
preventing it from ever being fixed
result is broken ota and recovery updates
2018-12-20 17:22:34 -05:00
Tad
c5d2f25797
11.0: nex: switch to -user + add disabled overclock
2018-12-19 02:15:15 -05:00
Tad
a652eb1e23
11.0: Remove the rest of CMStats
...
Hmm, I don't remember Dialer having stats.
Goddamn spyware.
2018-12-18 23:39:29 -05:00
Tad
bae3092539
11.0: Remove CMStats
2018-12-18 22:08:57 -05:00
Tad
875d6505af
F-Droid changes
...
- Drop Briar repo, its in main repos now and seems to keep in sync
- Switch to official builds of PrivExt
2018-12-18 21:37:35 -05:00
Tad
715cb32468
11.0: Cherrypick ASB topics
2018-12-18 21:36:02 -05:00
Tad
314701f0e8
11.0: Drop grouper + more work
2018-12-18 21:36:01 -05:00
Tad
28b0e915f5
11.0: More restoration work
2018-12-18 21:35:41 -05:00
Tad
01be578137
11.0: Initial restore
...
I think this is like the 6th time I've done this.
I always remove it, wait a few months, pull out a device that I want to run it on
and then spend hours restoring and bringing it back. I always think to myself
do I really need to toy with this device? No, I don't, but I do it anyway. :)
2018-12-18 21:35:14 -05:00
Tad
c6206ccd7e
Minor updates
2018-12-17 17:59:12 -05:00
Tad
982462aa00
Update CVE patchers
2018-12-04 17:21:39 -05:00
Tad
6ea39e0a0f
Updates
2018-11-13 17:33:49 -05:00
Tad
5be6227a8b
Minor updates + Update CVE patchers
2018-11-06 21:09:35 -05:00
Tad
34be4797ea
Switch to official F-Droid
2018-10-20 16:26:42 -04:00
Tad
95959a0d89
Many changes
...
- Add back microG support (not enabled)
- Add choice between DNS66 and Blokada when $DOS_HOSTS_BLOCKING=false
2018-10-19 18:28:18 -04:00
Tad
5696da8d0c
Many changes
...
- 15.1: Update some CVE patchers
- 15.1: Address some mako denials
- 14.1: Add cherrypicks for various security patches
- Common: Prepare for F-Droid additional repos
- Common: Disable overclock for mako
- Misc tweaks
2018-10-19 09:55:08 -04:00
Tad
586f967667
Minor updates
2018-10-14 20:21:06 -04:00
Tad
136bb520aa
Update CVE patchers
2018-10-01 22:45:00 -04:00
Tad
776be6f992
Backport Updater Tor support patch to 14.1
2018-09-24 06:46:54 -04:00
Tad
08c65c8334
Patches to add captive portal check toggle from @MSe1969
2018-09-22 21:05:41 -04:00
Tad
b50352bc8e
Updater: Add initial Tor support
2018-09-20 21:45:58 -04:00
Tad
51fd815236
Update CVE patchers
2018-09-13 21:53:30 -04:00
Tad
f8a438b32a
Update CVE patchers
2018-09-12 15:45:35 -04:00
Tad
e5b588265c
Add function to always ensure discard mount option is enabled
2018-09-11 19:53:50 -04:00
Tad
8d79a008ff
hardenDefconfig: Ensure IOMMU is enabled
2018-09-05 04:53:42 -04:00
Tad
98762a1ccf
Update included apps
2018-08-30 23:11:14 -04:00
Tad
54ecd7ae21
hardenDefconfig improvements
2018-08-24 20:00:43 -04:00
Tad
9fb6c648d9
Partial revert of 1983d9a8f7
2018-08-24 00:26:35 -04:00
Tad
642f978509
Experimental Bluetooth audio quailty improvement patches, credit @ValdikSS
2018-08-23 22:31:43 -04:00
Tad
9cbc514c59
Initial support for geminipda
2018-08-23 18:50:13 -04:00
Tad
c3f480b867
Updates
2018-08-17 19:22:00 -04:00
Tad
17340a0963
Update CVE patchers
2018-08-10 21:03:28 -04:00
Tad
db3b42ae4f
Update CVE patchers + misc fixes
2018-08-08 20:23:26 -04:00
Tad
46b1b409c9
Update CVE patchers
2018-08-06 21:32:33 -04:00
Tad
4136ab17b8
Updates
2018-08-04 09:15:22 -04:00
Tad
94f1382077
Updates
2018-07-25 21:56:11 -04:00
Tad
e3dcb260aa
Update CVE Patchers
...
- and add initial rpi3 support
2018-07-22 09:37:23 -04:00
Tad
9af1881a89
Many changes
...
- 15.1: Fix build
- 15.1: Add jfltexx
- 15.1: Add CVE patchers for jf and fugu
- Manifests: Add Intel repos back
- Overlay: Add more default apps to launcher
- Remove more blobs
2018-07-19 22:15:20 -04:00
Tad
3c2fae77d5
Switch DNS to Cloudflare and fixup F-Droid Provisioner
...
- OpenNIC anycast seems to have disappeared and their main site is also down
2018-07-15 12:33:16 -04:00
Tad
bf1256f182
Final overlay fixes
2018-07-13 22:04:42 -04:00
Tad
3027afedd8
Overlay tweaks
2018-07-13 17:54:16 -04:00
Tad
df213a8b19
Overlay fixes and F-Droid additional repos prep
2018-07-13 17:43:14 -04:00
Tad
5ae0eb7a92
More overlay work
2018-07-13 15:35:09 -04:00
Tad
2f50e7c142
Overlay fixes
2018-07-13 01:45:38 -04:00
Tad
91a6b29806
More overlay work
2018-07-13 01:02:41 -04:00
Tad
2ee7a13a80
More overlay work
2018-07-12 22:43:28 -04:00
Tad
2c6ba127d4
More overlay work
2018-07-12 22:29:21 -04:00
Tad
f95b73fe06
More overlay work
2018-07-12 22:19:30 -04:00
Tad
9dec3c7018
More overlay work
2018-07-12 22:12:55 -04:00
Tad
1dc92478ed
Many changes
...
- Drop Copperhead patches
- More overlay work
2018-07-12 22:05:02 -04:00
Tad
39740b384f
Drop KitKat (for the third time?)
2018-07-12 21:29:43 -04:00
Tad
79972d393c
DNM: WIP: Migrate to a proper vendor overlay for most changes
2018-07-12 21:27:01 -04:00
Tad
db0bcf60f3
Official F-Droid preparation
2018-07-12 21:25:43 -04:00
Tad
cb8fdaf3f5
Low RAM tweaks
2018-07-11 14:20:15 -04:00
Tad
5af16e1ddd
Add build option to enable lowram/go on all devices
2018-07-10 21:45:11 -04:00
Tad
746c925a22
14.1: Improved grouper perf tweaks
2018-07-10 19:45:48 -04:00
Tad
8b2902fd94
Tweaks
2018-07-10 17:59:03 -04:00
Tad
da5485d873
11.0: More work
2018-07-10 09:28:01 -04:00
Tad
966f4a5baf
11.0: More work
2018-07-10 08:29:08 -04:00
Tad
5716c58485
11.0: More work
2018-07-10 08:07:19 -04:00
Tad
05a5c7c38c
11.0: More fixes
2018-07-09 22:16:52 -04:00
Tad
bd5b0f6146
Tweaks
2018-07-07 02:37:00 -04:00
Tad
ae0d89ee8a
Many changes
...
- Switch to new HOSTS list
- Minor tweaks
- 14.1: Fix default Trebuchet workspaces
2018-07-04 15:35:16 -04:00
Tad
08bb0a87cc
Remove Android CVE patches
2018-07-03 03:34:24 -04:00
Tad
33c6980b88
Cleanup
2018-07-03 03:29:08 -04:00
Tad
31444ad3c8
Update CVE patchers
2018-07-02 23:16:36 -04:00
Tad
60a651008e
Changes
...
- Deblobber improvements and cleanup
- Fixup starlte
2018-07-01 00:34:34 -04:00
Tad
303fe971ed
Many changes
...
- 14.1: Fixup previous commits
- 15.1: Add mata
- Deblobber: Remove more blobs (audiofx, cne, hdr, ims-rtp)
2018-06-28 20:11:20 -04:00
Tad
29ace39eb9
Fixup previous 2 commits + misc tweaks
2018-06-27 12:04:42 -04:00
Tad
5d4d12b324
14.1: Add back all devices that were moved to 15.1
2018-06-27 09:17:50 -04:00
Tad
746b695d6a
Deduplicate updater patches
2018-06-27 08:43:12 -04:00
Tad
e65234f8eb
Many changes
...
- Allow OTA server to be set from init.sh
- Fix link updating from Rebrand.sh
- Update CVE patchers
2018-06-26 21:47:45 -04:00
Tad
af9126ffcb
More deduplication
...
- Deduplicate Trebuchet default workspaces
- Deduplicate LatinIME patches
- Deduplicate SetupWizard assets
- And fix a typo with grouper overclock
2018-06-26 21:25:59 -04:00
Tad
14b5b95cb8
Add overclocks for grouper
2018-06-26 13:58:08 -04:00
Tad
6746942f30
14.1: Add grouper
2018-06-26 05:57:22 -04:00
Tad
ee4ea5072b
Many changes
...
- Fixed UnifiedNLP not registering
- Inlined location provider patch
- Simplified generateBootAnimationShine
- Add notes about inclusion of other apps
- Replaced microG with just UnifiedNLP
2018-06-25 14:19:38 -04:00
Tad
c914a655a5
Fixup previous commits
2018-06-25 10:16:32 -04:00
Tad
97248d28f2
Implement choice of UnifiedNLP only or full microG
2018-06-25 09:31:31 -04:00
Tad
f6cdc9426c
Many changes
...
- Remove proprietary audio enhancement blobs
- Remove AudioFX to prevent crashes after blobs are removed
- Deduplicate patches a bit with the new Patches/Common directory
- Switch boot animation shine generation from gradient to plasma
- Update submodules
2018-06-25 07:59:24 -04:00
Tad
3a3fe5aca9
Replace DNS patches with a function + some misc fixes
2018-06-24 01:27:33 -04:00
Tad
5772b68224
Update CVE patches + more globbing fixes
2018-06-23 03:39:01 -04:00
Tad
af94760587
Remove msm8992 overclocks
2018-06-23 00:23:34 -04:00
Tad
a0ce912d99
Add Provisioner repo to F-Droid and fixup previous deblobber changes
2018-06-17 19:42:17 -04:00
Tad
2ed7a8a874
init.sh: add options to control extra parts of the deblobber
2018-06-13 07:07:47 -04:00
Tad
8eeafdd09f
Changes for trust_interface and other misc tweaks
2018-06-10 19:00:02 -04:00
Tad
b10f0a97dc
Update CVE patchers + misc fixes
2018-06-05 00:35:42 -04:00
Tad
eeba3fd873
Going the distance...
2018-06-03 14:13:59 -04:00
Tad
bf8f1e4d3d
More fixes and cleanup
2018-06-02 18:34:15 -04:00
Tad
2fb4b7f5f1
Add option to disable inclusion of microG
2018-06-02 17:37:21 -04:00
Tad
fe6f853746
mako: add back LTE support patch
2018-05-30 03:45:43 -04:00
Tad
ab9487fea1
Tweaks
2018-05-29 13:30:37 -04:00
Tad
f9f893a443
Hamper the ad/analytics libraries!
2018-05-21 05:28:07 -04:00
Tad
67db210756
Many changes
...
- 15.1: Fixup ether here too
- Change F-Droid application id to allow installation of official F-Droid side by side
- Remove FDroidPriv patch and use sed instead
- Optimize: Switch VM_MAX_READAHEAD to 512KB
- Misc tweaks
- Update TODO
2018-05-20 23:30:40 -04:00
Tad
dfaf44387b
Update CVE patchers
2018-05-17 16:42:42 -04:00
Tad
f30d5cd7f2
Update links
2018-05-13 22:21:42 -04:00