From 76867894c0877945830f9baa02b64ad5456f69d1 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Fri, 20 Jan 2023 03:33:55 -0500 Subject: [PATCH] formally disallow installing instant apps --- static/releases.html | 1 + 1 file changed, 1 insertion(+) diff --git a/static/releases.html b/static/releases.html index bcc1cc2d..ee444a94 100644 --- a/static/releases.html +++ b/static/releases.html @@ -672,6 +672,7 @@
  • SELinux policy: drop auditing for apk_data_file execute/execute_no_trans (research is done)
  • SELinux policy: add back apk_data_file execute/execute_no_trans for adb shell for debugging use cases (removing it isn't really useful for hardening and we plan on hardening ADB for the verified boot model another way)
  • Settings: revert to standard Android 13 minimum threshold of 10% for automatic battery saver since lowering it below 10% doesn't work as intended without more invasive changes outside the scope of GrapheneOS
    • +
  • fully disallow installing instant apps instead of permitting ADB shell and system apps to do it (this will simplify future work)
    • -->