fs-verity enforcement clarification

This commit is contained in:
Daniel Micay 2023-01-25 08:15:58 -05:00
parent 6970fafb37
commit 15fe088f49

View File

@ -691,7 +691,7 @@
<li>extend the install available apps feature (allows Owner user to install apps in other users) to apps only installed in secondary profiles</li> <li>extend the install available apps feature (allows Owner user to install apps in other users) to apps only installed in secondary profiles</li>
<li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/13">version 13</a></li> <li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/13">version 13</a></li>
<li>add GrapheneOS fs-verity public key as a supported key</li> <li>add GrapheneOS fs-verity public key as a supported key</li>
<li>require fs-verity for system app updates</li> <li>require fs-verity for installing system app updates (will be enforced at boot for verified boot enhancement in a future release due to the need to phase in the feature properly because of future out-of-band app updates on earlier OS releases)</li>
<li>Vanadium: update Chromium base to 109.0.5414.118</li> <li>Vanadium: update Chromium base to 109.0.5414.118</li>
<li>SettingsIntelligence: drop no longer required QUERY_ALL_PACKAGES permission now that more precise queries are defined upstream providing the necessary package visibility for Settings app search</li> <li>SettingsIntelligence: drop no longer required QUERY_ALL_PACKAGES permission now that more precise queries are defined upstream providing the necessary package visibility for Settings app search</li>
</ul> </ul>