extenf self app-op spoofing

This commit is contained in:
Daniel Micay 2023-01-20 15:39:46 -05:00
parent 76867894c0
commit 3c9cf60725

View File

@ -673,6 +673,7 @@
<li>SELinux policy: add back apk_data_file execute/execute_no_trans for adb shell for debugging use cases (removing it isn't really useful for hardening and we plan on hardening ADB for the verified boot model another way)</li> <li>SELinux policy: add back apk_data_file execute/execute_no_trans for adb shell for debugging use cases (removing it isn't really useful for hardening and we plan on hardening ADB for the verified boot model another way)</li>
<li>Settings: revert to standard Android 13 minimum threshold of 10% for automatic battery saver since lowering it below 10% doesn't work as intended without more invasive changes outside the scope of GrapheneOS</li> <li>Settings: revert to standard Android 13 minimum threshold of 10% for automatic battery saver since lowering it below 10% doesn't work as intended without more invasive changes outside the scope of GrapheneOS</li>
<li>fully disallow installing instant apps instead of permitting ADB shell and system apps to do it (this will simplify future work)</li> <li>fully disallow installing instant apps instead of permitting ADB shell and system apps to do it (this will simplify future work)</li>
<li>extend self app-op spoofing used for Network permission compatibility to unsafeCheckOpRaw()</li>
</ul> </ul>
</article> </article>
--> -->