From 267a9d9a06c02f2268a5e92a3a237e4e3065528e Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Sat, 28 Jan 2023 02:09:31 -0500
Subject: [PATCH] revert our base OS apk_data_file restrictions

---
 static/releases.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/releases.html b/static/releases.html
index b67fa964..314661d5 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -669,6 +669,7 @@
                     <ul>
                         <li>Settings: fix issue preventing users from re-enabling system apps they previously disabled which can no longer be disabled</li>
                         <li>fix upstream Android bug causing out-of-band updates to system components using original-package to be rolled back after reboot if they're still using the old package name, which will allow us to ship Vanadium updates out-of-band without the browser package updates being rolled back for users with an older install where it's still <code>org.chromium.chrome</code> instead of <code>app.vanadium.browser</code></li>
+                        <li>SELinux policy: drop base OS apk_data_file restrictions to avoid blocking out-of-band updates to APK-based system components (this was a minor security feature that's being replaced with our recent and ongoing improvements to package manager and verified boot security to close major weaknesses in the standard Android verified boot security model)</li>
                     </ul>
                 </article>
                 -->