Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
1,301 Commits 1 Branch 0 Tags 101 MiB
bc443ffee3
Commit Graph

293 Commits

Author SHA1 Message Date
Tad
204285d7c8 kernel command line: enable hardening options 2019-10-18 22:14:28 -04:00
Tad
e13c6c7c9c processRelease features 
- support removing device out after complete
- support malware scan before sign
- Update cherry picks
 2019-10-15 12:23:46 -04:00
Tad
bffcd06644 16.0: add zenfone3 2019-10-11 15:16:09 -04:00
Tad
159e5ea194 Minor tweaks 
- Update cherry picks
- Update copyright year
- bacon: fix delta generation
 2019-10-11 13:24:38 -04:00
Tad
579f340c3c Update CVE patchers 2019-10-04 14:43:19 -04:00
Tad
f20ddfc0f6 Minor tweaks 2019-10-04 10:39:27 -04:00
Tad
79ec8a4999 clark: experimental 16.0 2019-09-28 17:37:18 -04:00
Tad
a0e8f9653c Future proofing keys 2019-09-25 21:04:24 -04:00
Tad
ca734124f9 Generate factory image if needed by device 2019-09-23 12:45:00 -04:00
Tad
f55cdef5b0 Minor tweaks 2019-09-21 15:42:26 -04:00
Tad
4a1ebe1b71 Scripts: localize variables in functions 2019-09-17 04:14:35 -04:00
Tad
e01e457b24 Per-device signing keys 
- also fix OTA/recovery key regression
- Update cherrypicks
 2019-09-15 22:18:04 -04:00
Tad
19d5b66097 Many changes 
- ASB chery picks
- 16.0: recovery: fix sideload
- Restore releasetools for some devices
- Only include Backup where supported
- Change some small defaults
- z00t: 14.1 -> 15.1
- himaul: 14.1 -> 15.1
- i9100: 14.1 -> 15.1+16.0
- flo: 15.1 -> 16.0, disabled
- flounder: 15.1 disabled, enable 14.1
 2019-09-13 20:24:02 -04:00
Tad
ec48a4c89c Update CVE patchers 2019-09-04 01:31:12 -04:00
Tad
db572efa89 Many changes 
- processRelease: Support AVB
- sort device build order by SoC

Additions:
- taimen/muskie: 15.1, 16.0
- crosshatch/blueline: 16.0
- bonito/sargo: 16.0
 2019-09-03 16:50:50 -04:00
Tad
1bd0e47099 victara: 15.1 -> 16.0 
- other fixes
 2019-08-30 22:42:10 -04:00
Tad
330df0983c 16.0: Add GrapheneOS' exec-based spawning feature + misc tweaks 
- patch credit updates
- 16.0: allow SystemUI to directly manage Bluetooth/WiFi
 - from GrapheneOS
- cleanup
 2019-08-30 02:30:13 -04:00
Tad
e10a865b05 Improve release processing to support deltas and archiving 2019-08-29 19:09:31 -04:00
Tad
057bedb65b Minor tweaks 
- 14.1+15.1+16.0: enable kernel protections for files
 - protected_*: hardlinks, symlinks, fifos, regular
 - from GrapheneOS
- defconfig: enable more verity options
- cleanup
 2019-08-28 20:24:59 -04:00
Tad
db348ab09c Minor tweaks 
- 15.1+16.0: Replace in-line build signing patch with bash function
 - From GrapheneOS/script
- 15.1+16.0: Enable fingerprint failed lockout after 5 attempts
 - From GrapheneOS
 2019-08-28 00:40:27 -04:00
Tad
68cdef8733 Minor tweaks 2019-08-26 20:50:28 -04:00
Tad
eccf9c6f6d Many new devices 
- hammerhead: 15.1 -> 16.0

- axon7: 14.1, 15.1
- cheryl: 16.0
- crackling: 14.1, 15.1, 16.0
- ham: 14.1, 15.1, 16.0
- kipper: 14.1, 15.1, 16.0
- z2_plus: 16.0
 2019-08-23 17:27:53 -04:00
Tad
e9b5c06188 Lots of device updates 
- d802: 15.1 -> 16.0
- d852: 15.1 -> 16.0
- d855: 15.1 -> 16.0
- fugu: 15.1 -> 16.0
- jfltexx: 14.1 -> 16.0
- m8: 15.1 -> 16.0
- mata: 15.1 -> 16.0
- update cherrypicks
- defconfig: enable MMC_SECDISCARD
 2019-08-23 11:47:43 -04:00
Tad
3a080bbcd7 Minor tweaks 2019-08-13 01:56:01 -04:00
Tad
89de66bdba Many small changes 
- Cherrypicks for ASB patches
- Apps: Switch gallery to Simple Gallery
- Apps: Switch camera to OpenCamera
- PKGBUILD: update with image optimization dependencies
- Deblobber: fix bug introducted in 6d33e4ecbf
 2019-08-08 14:22:24 -04:00
Tad
6d33e4ecbf Parallize many functions invoked by find 2019-08-05 21:09:35 -04:00
Tad
3f8e9a846b Complete tree image optimization 
- recursively optimize images using optipng/jpegoptim
benefits:
+ reduces image size
+ decreases load time
+ reduces memory usage
 2019-08-05 20:34:08 -04:00
Tad
55c3072089 Going the distance... [pt2] 2019-06-18 13:51:04 -04:00
Tad
380353773e Fixes 2019-05-17 20:48:26 -04:00
Tad
30bf0f2fb9 Resurrect verity 2019-05-09 06:16:34 -04:00
Tad
ebaf61eb31 Cherrypicks 2019-05-07 03:10:55 -04:00
Tad
60cf364f19 Minor tweaks 
- init.sh: sort options
- overlay: leave radioScanningTimeout default
- hardenDefconfig: disable more components with CVEs
- cherry picks
- 16.0: trebuchet: tmp fix for default workspace overlay
 2019-04-03 19:04:37 -04:00
Tad
1c49b80da0 Minor tweaks 
- CVE patchers were updated with no change
- hardenDefconfig: disable MSM_SMP2P_TEST to mitigate CVE-2019-2247
- 14.1 add a cherry pick
 2019-04-01 18:57:04 -04:00
Tad
7223df543a Minor fixes 2019-03-31 22:46:37 -04:00
Tad
61ee2e5757 More minor fixes 2019-03-26 19:37:56 -04:00
Tad
3c806603d9 Various fixes 2019-03-25 21:30:26 -04:00
Tad
8f609e9cbe Minor tweaks 
+ remove a few more blobs
+ fix broken USB and log spam on hdx*
 2019-03-24 16:32:55 -04:00
Tad
54c68a1e93 Fixup radio on Motorola device 2019-03-23 20:23:42 -04:00
Tad
a8dbb447ed Deblobber cleanup 
Break all the really long lines up into the following categories
- libraries (*.so)
- jars (*.jar)
- binaries
- apps (*.apk)
- non-executables (*.xml, *.cfg, *.conf, *.txt)
- firmwares (tz.*)
- treble stuff (vendor.*, com.*)
 2019-03-23 18:11:57 -04:00
Tad
c044136234 Remove many more blobs 2019-03-23 14:57:39 -04:00
Tad
fc2e71acbe Remove more blobs 2019-03-22 19:43:29 -04:00
Tad
a91a3d427a Remove more blobs 2019-03-22 06:04:29 -04:00
Tad
dd7e4c3faf Remove more blobs 2019-03-22 05:28:57 -04:00
Tad
e344b17a36 Build fixes + new blob blocker 2019-03-22 04:20:06 -04:00
Tad
3c056c7785 Remove some more blobs 2019-03-21 08:55:01 -04:00
Tad
cf5a58f447 11.0: misc. fixes 2019-03-17 17:27:51 -04:00
Tad
913fbcd109 ASB cherry picks + minor tweaks 2019-03-05 22:57:45 -05:00
Tad
23056ddef0 Minor tweaks 2019-03-04 03:11:51 -05:00
Tad
fccc124868 tuna fixes + fdroid priv changes 2019-02-14 04:36:50 -05:00
Tad
c9e17ffb52 Many changes 
- Add more DNS resolver choices
- Change default DNS resolver back to OpenNIC
- More cleanup
- 15.1: Update some CVE patchers
 2019-02-09 20:51:23 -05:00
Tad
9178760d1a Updater: Fix downloads over Tor 
+ Update TODO
+ Minor tweaks
 2019-02-08 20:58:15 -05:00
Tad
24c291c630 Improve hardenLocation to include fwb and its overlays 2019-02-08 18:46:42 -05:00
Tad
aa9b5499e6 Updates 2019-02-07 11:15:29 -05:00
Tad
3f9d78a4c7 Updates 2019-02-06 17:44:17 -05:00
Tad
a7a0a67888 Many changes 
- Allow enabling accessibility services without disabling secure start-up
- Disable overclocks
- Update select CVE patchers
- Update submodules
- Support select downloads over Tor
- Update defconfig enablers
- Cherry pick security patches
 2019-01-14 03:12:50 -05:00
Tad
0df749ef73 Add more preferred network modes such as LTE Only, LTE/3G only, and 3G only 2018-12-28 08:02:24 -05:00
Tad
c07027dd97 Many changes 
- Update CVE patchers
- Update submodules
- Update defconfig enablers
- Update DNS IP addresses
- + Misc changes
 2018-12-24 23:29:56 -05:00
Tad
6c4eadcdc7 Manifest cleanup + always remove latemount from /cache 
formatting/erasing /cache will result in selinux contexts being lost
these are normally restored by system/core/rootdir/init.rc in post-fs
but latemount causes /cache to not be mounted beforehand
preventing it from ever being fixed
result is broken ota and recovery updates
 2018-12-20 17:22:34 -05:00
Tad
c5d2f25797 11.0: nex: switch to -user + add disabled overclock 2018-12-19 02:15:15 -05:00
Tad
01be578137 11.0: Initial restore 
I think this is like the 6th time I've done this.
I always remove it, wait a few months, pull out a device that I want to run it on
and then spend hours restoring and bringing it back. I always think to myself
do I really need to toy with this device? No, I don't, but I do it anyway. :)
 2018-12-18 21:35:14 -05:00
Tad
5696da8d0c Many changes 
- 15.1: Update some CVE patchers
- 15.1: Address some mako denials
- 14.1: Add cherrypicks for various security patches
- Common: Prepare for F-Droid additional repos
- Common: Disable overclock for mako
- Misc tweaks
 2018-10-19 09:55:08 -04:00
Tad
586f967667 Minor updates 2018-10-14 20:21:06 -04:00
Tad
5df567fe3b Cleanup overclocks.sh 2018-10-02 13:55:39 -04:00
Tad
136bb520aa Update CVE patchers 2018-10-01 22:45:00 -04:00
Tad
137c8d992d Various changes 2018-09-21 16:32:02 -04:00
Tad
8347c07ec1 Deduplicate Overclock.sh and Optimize.sh 2018-09-21 03:55:54 -04:00
Tad
289b110d8f Fix GPS on various devices 2018-09-19 01:03:02 -04:00
Tad
4929867e95 Build fixes 2018-09-14 19:34:01 -04:00
Tad
d9970b3f77 Minor tweaks and update F-Droid 2018-09-12 13:43:05 -04:00
Tad
e5b588265c Add function to always ensure discard mount option is enabled 2018-09-11 19:53:50 -04:00
Tad
d231bd3172 Build fixes 2018-09-06 07:48:10 -04:00
Tad
8d79a008ff hardenDefconfig: Ensure IOMMU is enabled 2018-09-05 04:53:42 -04:00
Tad
8e79da6971 GPG verify all F-Droid apps before copy 2018-08-30 23:46:17 -04:00
Tad
44a192b7a4 Various fixes 2018-08-26 20:32:19 -04:00
Tad
09fe9b212a Refinements of previous commits 2018-08-24 23:56:38 -04:00
Tad
54ecd7ae21 hardenDefconfig improvements 2018-08-24 20:00:43 -04:00
Tad
48d7f11919 Deblobber improvements 
Deblobber
- Remove more diag blobs
- Remove more AT blobs
- Remove IPA blobs by default now
- Support removal of IPC security exceptions

+ also disable earjack debugger via hardenDefconfig()
 2018-08-24 18:35:53 -04:00
Tad
1983d9a8f7 Update CVE patchers 2018-08-23 21:26:33 -04:00
Tad
2a427a14bf More geminipda work 2018-08-23 19:25:33 -04:00
Tad
9cbc514c59 Initial support for geminipda 2018-08-23 18:50:13 -04:00
Tad
50bdbaedf2 More GPS fixes 2018-08-09 00:42:07 -04:00
Tad
db3b42ae4f Update CVE patchers + misc fixes 2018-08-08 20:23:26 -04:00
Tad
bf717204e3 GPS improvements 2018-08-07 23:28:38 -04:00
Tad
b384623f16 Deblobber: TimeKeep replacement fixes 
- Still needs more fixes
- 14.1: Also update CVE patcher for motorol_msm8916
 2018-07-20 20:06:36 -04:00
Tad
9af1881a89 Many changes 
- 15.1: Fix build
- 15.1: Add jfltexx
- 15.1: Add CVE patchers for jf and fugu
- Manifests: Add Intel repos back
- Overlay: Add more default apps to launcher
- Remove more blobs
 2018-07-19 22:15:20 -04:00
Tad
bf49c6a5fa Many changes 
- Remove more blobs
- 14.1: Add fugu
- 15.1: Add fugu and readd clark
 2018-07-12 21:14:11 -04:00
Tad
0da4e7d6c0 Remove more blobs 2018-07-12 16:49:05 -04:00
Tad
e2ae8e333a More terminators 2018-07-11 08:01:45 -04:00
Tad
966f4a5baf 11.0: More work 2018-07-10 08:29:08 -04:00
Tad
58d7e42a1d Initial support for 11.0 2018-07-09 16:04:09 -04:00
Tad
ae0d89ee8a Many changes 
- Switch to new HOSTS list
- Minor tweaks
- 14.1: Fix default Trebuchet workspaces
 2018-07-04 15:35:16 -04:00
Tad
b35cf0f3ae Few changes 
- Deblobber: Fixup AudioFX handling
- 15.1: Fixup starlte
 2018-07-01 22:06:29 -04:00
Tad
60a651008e Changes 
- Deblobber improvements and cleanup
- Fixup starlte
 2018-07-01 00:34:34 -04:00
Tad
a13b2ddfa8 Many changes 
- SwiftShader progress
- Fix log spam after removal of AudioFX
- 15.1: Add starlte
- Misc tweaks/fixes
 2018-06-30 23:43:35 -04:00
Tad
c950207b08 Deblobber: Removing more blobs 
- Add initial support to remove graphics blobs
- Add initial support to perform OpenGL rendering using SwiftShader
- Add support to remove Peripheral Manager blobs
- Remove more AudioFX blobs
 2018-06-30 19:52:46 -04:00
Tad
075064f266 Remove more blobs 
- Remove external accessory blobs
- Remove more AudioFX blobs
- Support removal of fingerprint reader blobs
- Support removal of IR blobs
- Remove more HDCP blobs
- Remove more HDR blobs
- Remote more Verizon blobs
 2018-06-30 14:49:22 -04:00
Tad
30d59ea53d More devices 
- 14.1: dragon, manta, us996, us997, victara
- 15.1: dragon, us996, us997, victara
- Deblobber: Remove more blobs
 2018-06-30 14:03:11 -04:00
Tad
d2ba1ddb20 Overhaul variable names 2018-06-29 13:46:12 -04:00
Tad
303fe971ed Many changes 
- 14.1: Fixup previous commits
- 15.1: Add mata
- Deblobber: Remove more blobs (audiofx, cne, hdr, ims-rtp)
 2018-06-28 20:11:20 -04:00
Tad
5d4d12b324 14.1: Add back all devices that were moved to 15.1 2018-06-27 09:17:50 -04:00
Tad
6746942f30 14.1: Add grouper 2018-06-26 05:57:22 -04:00
Tad
3e931219df Few changes 
- Fix F-Droid building
- Update F-Droid preferences
- Add privacy policy links for DNS presets
 2018-06-25 19:15:22 -04:00
Tad
ee4ea5072b Many changes 
- Fixed UnifiedNLP not registering
- Inlined location provider patch
- Simplified generateBootAnimationShine
- Add notes about inclusion of other apps
- Replaced microG with just UnifiedNLP
 2018-06-25 14:19:38 -04:00
Tad
c914a655a5 Fixup previous commits 2018-06-25 10:16:32 -04:00
Tad
accb8bba37 Implement choice between gradient and plasma for boot animation shine 2018-06-25 09:35:38 -04:00
Tad
f6cdc9426c Many changes 
- Remove proprietary audio enhancement blobs
- Remove AudioFX to prevent crashes after blobs are removed
- Deduplicate patches a bit with the new Patches/Common directory
- Switch boot animation shine generation from gradient to plasma
- Update submodules
 2018-06-25 07:59:24 -04:00
Tad
0eeea28907 Boot animation color improvements 2018-06-24 10:18:19 -04:00
Tad
bfa7e90d5e Boot animation shine! 2018-06-24 08:42:02 -04:00
Tad
30a8e0ba07 Minor tweaks 2018-06-24 05:26:03 -04:00
Tad
c44d11fb99 Boot animation customization! 2018-06-24 04:31:38 -04:00
Tad
3a3fe5aca9 Replace DNS patches with a function + some misc fixes 2018-06-24 01:27:33 -04:00
Tad
5772b68224 Update CVE patches + more globbing fixes 2018-06-23 03:39:01 -04:00
Tad
a79c888157 Fixes 2018-06-23 02:38:49 -04:00
Tad
24b76f617b Globbing fixes 2018-06-23 01:08:42 -04:00
Tad
79429b40a4 Add init.sh option to remove AudioFX 2018-06-23 00:51:10 -04:00
Tad
9c3996bed9 Shellcheck 
mainly just double quoting
 2018-06-23 00:21:48 -04:00
Tad
a0ce912d99 Add Provisioner repo to F-Droid and fixup previous deblobber changes 2018-06-17 19:42:17 -04:00
Tad
9de8123872 Deblobber: Don't build drmserver 2018-06-17 15:12:54 -04:00
Tad
60e5d491e9 Deblobber: Remove sepolicy files too 2018-06-16 18:43:07 -04:00
Tad
79aa32c5e2 Cleanup 2018-06-13 19:48:53 -04:00
Tad
2ed7a8a874 init.sh: add options to control extra parts of the deblobber 2018-06-13 07:07:47 -04:00
Tad
97fc2a236f Fixes and AES improvements ? 2018-06-12 15:25:06 -04:00
Tad
7c052a7b38 Tweaks 2018-06-12 13:34:59 -04:00
Tad
7005ff0073 15.1: Update CVE patchers + build fixes 2018-06-11 20:33:16 -04:00
Tad
4912609425 Tweaks 2018-06-08 14:15:50 -04:00
Tad
dc9ec2d8f3 Tweaks 2018-06-06 17:32:17 -04:00
Tad
eeba3fd873 Going the distance... 2018-06-03 14:13:59 -04:00
Tad
3fb3824f6d Misc tweaks 2018-06-03 08:29:15 -04:00
Tad
fe66b008c0 Changes 2018-05-23 06:25:41 -04:00
Tad
67db210756 Many changes 
- 15.1: Fixup ether here too
- Change F-Droid application id to allow installation of official F-Droid side by side
- Remove FDroidPriv patch and use sed instead
- Optimize: Switch VM_MAX_READAHEAD to 512KB
- Misc tweaks
- Update TODO
 2018-05-20 23:30:40 -04:00
Tad
29e49a5147 Fixup ether 2018-05-20 14:57:54 -04:00
Tad
66db536b08 Tweaks 2018-05-16 14:21:20 -04:00
Tad
2c1b2bed95 Tweaks 2018-05-15 17:45:22 -04:00
Tad
dd340b087e Deblobber: Use wildcards to remove more blobs 2018-05-11 06:50:57 -04:00
Tad
82896187de Further improve malware scanner 2018-05-11 06:15:29 -04:00
Tad
82758a5303 Improve the malware scanner and enable by default 2018-05-11 02:50:52 -04:00
Tad
5695712cf4 Many changes 
- Add support to scan for malware in certain directories
- 15.1: Add new device, griffin
- Note deprecation status of various devices
- Add a few blobs to the deblobber
 2018-05-10 23:46:18 -04:00
Tad
b30c62629b Revert "Strong AES patch changes" 
This reverts commit 60b85e10fe.
 2018-04-28 15:35:53 -04:00
Tad
60b85e10fe Strong AES patch changes 2018-04-28 15:25:42 -04:00
Tad
520dbf246a Add a warning when restricted patches are enabled 2018-04-23 18:18:09 -04:00
Tad
f122ccb9f1 Many changes 
- Disable patches with restrictive licenses by default
- Update LICENSE
- Fixup the fix for F-Droid building
- 15.1: Fix forceencrypt on mako
- 15.1: Fix crashes when accessing factory reset and development settings menus
 on devices without support for factory reset protection or oem unlocking
 2018-04-23 15:42:27 -04:00
Tad
02908a652a Terminate all lines 2018-04-23 08:59:18 -04:00
Tad
f0ab546816 Dramatically deduplicate scripts 2018-04-04 07:52:11 -04:00