security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

defer SELinux policy changes for Vanadium

Browse Source
This commit is contained in:
Daniel Micay 2023-01-25 07:32:55 -05:00
parent 4f82c8834e
commit 6970fafb37
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
static/releases.html
View File

@ -692,7 +692,6 @@
<li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/13">version 13</a></li>
<li>add GrapheneOS fs-verity public key as a supported key</li>
<li>require fs-verity for system app updates</li>
<li>SELinux policy: drop base OS apk_data_file restrictions to avoid blocking out-of-band updates to system apps providing native libraries such as Vanadium since we're going to be taking the approach of enforcing fs-verity for system app updates as a complete approach to proper verified boot enforcement for every read of data from out-of-band system component updates instead of only disallowing some forms of out-of-band updates</li>
<li>Vanadium: update Chromium base to 109.0.5414.118</li>
<li>SettingsIntelligence: drop no longer required QUERY_ALL_PACKAGES permission now that more precise queries are defined upstream providing the necessary package visibility for Settings app search</li>
</ul>