security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

explain device support

Browse Source
This commit is contained in:
Daniel Micay 2019-05-02 10:29:08 -04:00
parent 54886d2567
commit c6830bc624
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
static/index.html
View File

@ -59,6 +59,35 @@
support for your own builds.</p>
<p>The sources are available via the
<a href="https://github.com/GrapheneOS/platform_manifest">manifest on GitHub</a>.</p>
<h2>Device support</h2>
<p>In the current early stage of the project, GrapheneOS provides production releases
for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3 and Pixel 3 XL. It will support
other devices in the future, but devices are carefully chosen based on their merits
rather than the project aiming to have broad device support. Broad device support is
counter to the aims of the project, and the project will eventually be engaging in
hardware and firmware level improvements rather than only offering suggestions and bug
reports upstream for those areas. Much of the work on the project involves changes
that are specific to different devices, and officially supported devices are the ones
targeted by most of this ongoing work. GrapheneOS also has source level support
without device-specific hardening for the Android emulator, HiKey, HiKey 960 and also
generic targets providing basic support for many other devices.</p>
<p>Devices need to be meet the standards of the project in order to be considered as
potential targets. In addition to support for installing other operating systems,
standard hardware-based security features like the hardware-backed keystores, verified
boot and attestation need to be available. Devices with support for alternative
operating systems as an afterthought will not be considered. Devices need to have
proper ongoing support for their firmware and software specific to the hardware like
drivers in order to provide proper full security updates too. Devices that are
end-of-life and no longer receiving these updates will not be supported.</p>
<p>In order to support a device, the appropriate resources also need to be available
and dedicated towards it. Releases for each supported device need to be robust and
stable, with all standard functionality working properly and testing for each of the
releases.</p>
<p>Hardware, firmware and software specific to devices like drivers play a huge role
in the overall security of a device. The goal of the project is not to slightly
improve some aspects of insecure devices and supporting a broad set of devices would
be directly counter to the values of the project. A lot of the low-level work also
ends up being fairly tied to the hardware.</p>
</div>
</body>
</html>