From 2aae5b3173f6494abe80369da21774b182bc4414 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 27 Dec 2022 09:49:44 -0500 Subject: [PATCH] add privileged installer package search API --- static/releases.html | 1 + 1 file changed, 1 insertion(+) diff --git a/static/releases.html b/static/releases.html index 71768f72..3f2a80d5 100644 --- a/static/releases.html +++ b/static/releases.html @@ -665,6 +665,7 @@
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10): update to latest GKI LTS branch revision which provides a proper fix for a backport mistake we discovered and reported
  • block updating system packages to versions with the same versionCode since system packages without releases outside the OS rarely have their versionCode increased when changes are made and therefore it makes it possible to downgrade them which is a security weakness in Android's approach
  • prefer package from OS image over equal version packages installed as an update to improve security by dropping potentially downgraded packages particularly for the verified boot security model, with the bonus of saving disk space by dropping out-of-band updates installed from our app repository once they're redundant
    • +
  • add an API for system apps with the privileged INSTALL_PACKAGES permission to search for packages across all profiles in order to avoid redownloading packages that are already installed in another user and to prevent attempting to downgrade a package with a newer version already installed in another user (used by the GrapheneOS app repository client within GrapheneOS to provide a better experience than it can when not integrated into the OS)
  • TalkBack (screen reader): update base code to 13
  • TalkBack (screen reader): update dependencies