Tad
c45a1db5e2
17.1 November ASB work
...
Plus a bonus October patch from @flamefire
https://github.com/Flamefire/android_device_sony_lilac/blob/lineage-17.1/patches/asb-2023-10/android_packages_providers_MediaProvider/0001-Fix-path-traversal-vulnerabilities-in-MediaProvider.patch
Signed-off-by: Tad <tad@spotco.us>
2023-11-13 16:25:48 -05:00
Tad
77b7de4b1e
Picks
...
Signed-off-by: Tad <tad@spotco.us>
2023-11-09 17:59:22 -05:00
Tad
01a196e055
Pull in Messaging notifications fix
...
Likely solves https://github.com/Divested-Mobile/DivestOS-Build/issues/141
Signed-off-by: Tad <tad@spotco.us>
2023-11-05 19:32:30 -05:00
Tad
bf565cd578
Switch to upstream ASB patchsets
...
Signed-off-by: Tad <tad@spotco.us>
2023-10-08 22:52:14 -04:00
Tad
8ca9d55a57
Update commons
...
Signed-off-by: Tad <tad@spotco.us>
2023-10-03 15:33:07 -04:00
Tad
7d2c184d1f
Bonus patches
...
Signed-off-by: Tad <tad@spotco.us>
2023-10-03 15:17:06 -04:00
Tad
fcf4f812cc
CVE-2023-5217
...
untested
Signed-off-by: Tad <tad@spotco.us>
2023-09-28 09:17:29 -04:00
Tad
25f02f4177
14.1 though 17.1: patch CVE-2023-4863, thanks to @syphyr
...
run tested on 14.1, 15.1, and 17.1
compile tested on 16.0
Signed-off-by: Tad <tad@spotco.us>
2023-09-20 04:16:17 -04:00
Tad
8b51c3cd0f
Fixup OpenEUICC inclusion
...
Signed-off-by: Tad <tad@spotco.us>
2023-08-21 20:00:31 -04:00
Tad
d6c3b6c8fa
More eSIM work
...
- Add the GrapheneOS package hook mechanism
- Ensure OpenEUICC and EuiccSupportPixel are only enabled in the system user
- Prevent EuiccSupportPixel interactions
- Remove INTERNET permission from EuiccSupportPixel
Signed-off-by: Tad <tad@spotco.us>
2023-08-21 16:50:51 -04:00
Tad
c070e856b2
eSIM enablement via @PeterCxy's OpenEUICC
...
tested working on bluejay
Signed-off-by: Tad <tad@spotco.us>
2023-08-21 09:25:10 -04:00
Tad
160aee5049
Backport patch to handle verity with openssl 3.0
...
ref: https://github.com/Divested-Mobile/DivestOS-Website/pull/19
Signed-off-by: Tad <tad@spotco.us>
2023-08-11 18:53:01 -04:00
Tad
566decb5dd
Churn
...
Signed-off-by: Tad <tad@spotco.us>
2023-08-08 05:14:44 -04:00
Tad
7ef5d9a9c4
Broken EUICC handling
...
Signed-off-by: Tad <tad@spotco.us>
2023-08-05 18:57:32 -04:00
Tad
95a57748ea
Fix the fix
...
Signed-off-by: Tad <tad@spotco.us>
2023-07-25 13:03:44 -04:00
Tad
e458e9ddd4
Unbreak the F-Droid additional repos
...
microG pubkey was wrongly spanning multiple lines
likely from copy/paste of old diff
addresses https://gitlab.com/fdroid/fdroidclient/-/issues/2662
Signed-off-by: Tad <tad@spotco.us>
2023-07-25 13:01:45 -04:00
Tad
e74f861c8e
Fixes + Churn
...
- Fix instances of awk failing on missing globs
- Remove unwanted packages from work/user/managed profiles
- Remove proprietary camera extensions
Signed-off-by: Tad <tad@spotco.us>
2023-07-24 03:59:51 -04:00
Tad
aa6bfad801
Various
...
- Drop OpenCamera, it doesn't work on lock screens anymore?
- microG on 18.1+:
- set packages forceQueryable
- spoof some sources as Play Store
TODO: backport this to 17.1
- Remove camera extensions
- Churn
- Wording
Signed-off-by: Tad <tad@spotco.us>
2023-07-15 18:22:07 -04:00
Tad
192c73146a
Add a toggle for KSM
...
Signed-off-by: Tad <tad@spotco.us>
2023-07-14 17:11:21 -04:00
Tad
b5bb498248
Many tweaks
...
- 19.1/20.0: Enable low ram for <6GB devices
- 20.0: support RROs with exec spawning patch from GrapheneOS
- allow work profiles when low ram is enabled
- churn
- cherrypicks
Signed-off-by: Tad <tad@spotco.us>
2023-07-13 16:40:05 -04:00
Tad
eff7a69bed
Small changes
...
- Another fix
- Deblobber tweaks
- Patch from GrapheneOS
- Cherrypick
Signed-off-by: Tad <tad@spotco.us>
2023-07-13 10:58:41 -04:00
Tad
fdeceb5c9c
Fixups
...
Signed-off-by: Tad <tad@spotco.us>
2023-07-10 22:50:33 -04:00
Tad
5bc210f135
Adjust microg config path
...
/product can't be used for now
https://github.com/microg/GmsCore/issues/1976
also move the wording around so it can be easier to remove later
after a new release is tagged
Signed-off-by: Tad <tad@spotco.us>
2023-07-07 13:33:48 -04:00
Tad
492ed24ca2
Fixups
...
Signed-off-by: Tad <tad@spotco.us>
2023-07-06 17:59:25 -04:00
Tad
34f2d0d15a
Tweak micorG defaults
...
New options added
4772008582
Signed-off-by: Tad <tad@spotco.us>
2023-07-06 14:39:38 -04:00
Tad
c9a7ff8bba
Override all microG defaults to disabled
...
TODO after fixed:
SafetyNet: https://github.com/microg/GmsCore/issues/1971
Geocoder: https://github.com/microg/GmsCore/issues/1972
Signed-off-by: Tad <tad@spotco.us>
2023-07-04 14:48:18 -04:00
Tad
4282c7c35f
Backports of 0f4044e2
to 17.1/18.1/19.1
...
Also don't grant any special location permissions
Signed-off-by: Tad <tad@spotco.us>
2023-07-03 15:17:56 -04:00
Tad
0f4044e242
20.0: opt-in hardened unprivileged microG ability
...
Unlike other systems which ship privileged microG out of the box:
- User must enable microG repo in F-Droid
- User must install official microG apps (GmsCore/FakeStore/GSF)
- User must enable the microG toggle in Settings
- NOT a privileged app, not all features will work
- gmscore SELinux domain is still disabled
Signed-off-by: Tad <tad@spotco.us>
2023-07-03 13:45:06 -04:00
Tad
dc4d6b0901
Churn
...
Signed-off-by: Tad <tad@spotco.us>
2023-06-20 18:36:31 -04:00
Tad
cda898f141
Certificate Authority store updates
...
- Remove some untrustworthy CAs
- Update CA store for all branches to aosp/e302aa968334b3c3fc9cd709a7c7661e0cf534eb
Signed-off-by: Tad <tad@spotco.us>
2023-06-17 15:13:54 -04:00
Tad
0dde119d7e
20.0 June ASB work + churn
...
QPR3 is delayed a week now
Patches pulled from GrapheneOS and checked against CalyxOS
Signed-off-by: Tad <tad@spotco.us>
2023-06-12 21:06:42 -04:00
Tad
5aa8f42e7a
Update commons
...
Signed-off-by: Tad <tad@spotco.us>
2023-05-24 11:08:49 -04:00
Tad
39b0c9e036
Remove broken emoji updates
...
Signed-off-by: Tad <tad@spotco.us>
2023-05-02 15:31:57 -04:00
Tad
7b2eb1079a
Update emoji list in LatinIME too and disable
...
tested not working on 15.1
shows as cross boxes or double characters
Signed-off-by: Tad <tad@spotco.us>
2023-04-29 16:56:13 -04:00
Tad
86b7525400
Update the emojis, untested
...
Signed-off-by: Tad <tad@spotco.us>
2023-04-29 16:17:00 -04:00
Tad
2cc87c4dc7
Switch fingerprint locked to 5 attempts instead of 3 + churn
...
Signed-off-by: Tad <tad@spotco.us>
2023-04-12 15:26:26 -04:00
Tad
6433756d9f
F-Droid repo updates
...
Signed-off-by: Tad <tad@spotco.us>
2023-04-08 17:38:08 -04:00
Tad
4435c200ed
15.1+: vCard 4.0 support from GrapheneOS
...
8fbeedd002
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/202
Signed-off-by: Tad <tad@spotco.us>
2023-04-04 12:50:42 -04:00
Tad
e8adaec3d6
Update commons
...
Signed-off-by: Tad <tad@spotco.us>
2023-04-04 10:27:10 -04:00
Tad
ca93ef33ce
Slightly improve compatibility with apps that want GSF
...
38a5ca05e9
Signed-off-by: Tad <tad@spotco.us>
2023-03-28 23:45:58 -04:00
Tad
b4dbe27f23
Fixes
...
- 18.1: Fix exempted background tasks when dozing (GrapheneOS)
- 20.0: pick a fix for some colors after qpr2
- 20.0: fix the missing notification backdrop
Signed-off-by: Tad <tad@spotco.us>
2023-03-20 17:51:09 -04:00
Tad
9c6087f4a8
Update commons
...
Signed-off-by: Tad <tad@spotco.us>
2023-03-06 20:39:36 -05:00
Tad
6e75c0dbd3
Fix boot failure after WebView signature changes
...
Tested working on:
- 14.1: toroplus
- 15.1: bullhead, hammerhead
- 17.1: clark
This is the same issue which resulted in e61e288b
being reverted.
Still unclear why this happens.
Signed-off-by: Tad <tad@spotco.us>
2023-02-03 00:02:44 -05:00
Tad
dc853bfdae
WebView: Switch to dedicated package name
...
And remove the F-Droid repo for it, will be moved to the 'DivestOS Official' repo
This simplifies release management and also allows other systems to benefit from the repo
Downside is users who don't update to this build won't receive any updates for it anymore
Signed-off-by: Tad <tad@spotco.us>
2023-02-02 17:17:30 -05:00
Tad
57d951ccb5
Missing patches for 16.0 + Churn
...
Signed-off-by: Tad <tad@spotco.us>
2023-01-08 13:22:50 -05:00
Tad
4f1c1b343c
Update commons
...
Signed-off-by: Tad <tad@spotco.us>
2022-12-15 17:45:18 -05:00
Tad
7f24df22f7
Small updates
...
Signed-off-by: Tad <tad@spotco.us>
2022-11-21 06:09:29 -05:00
Tad
8bfedda18b
14/15/16: Fix compile failure with modern kernels
...
https://android-review.googlesource.com/c/platform/art/+/2226578
https://groups.google.com/g/Android-building/c/ZfUQQWt_ABI
Signed-off-by: Tad <tad@spotco.us>
2022-11-10 18:26:36 -05:00
Tad
8ddbd86d44
20.0: more devices
...
Signed-off-by: Tad <tad@spotco.us>
2022-10-19 15:22:20 -04:00
Tad
148df59b7e
Cleanup: Drop UnifiedNlp, FDroidPrivExt, and Silence
...
These haven't been included for a while
+remove some old cruft from 20.0
Signed-off-by: Tad <tad@spotco.us>
2022-10-19 12:15:24 -04:00