From c6830bc6246294ab128df8c18211d765854ccb9a Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Thu, 2 May 2019 10:29:08 -0400 Subject: [PATCH] explain device support --- static/index.html | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/static/index.html b/static/index.html index 6b9b7afc..3a26ebf8 100644 --- a/static/index.html +++ b/static/index.html @@ -59,6 +59,35 @@ support for your own builds.

The sources are available via the manifest on GitHub.

+

Device support

+

In the current early stage of the project, GrapheneOS provides production releases + for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3 and Pixel 3 XL. It will support + other devices in the future, but devices are carefully chosen based on their merits + rather than the project aiming to have broad device support. Broad device support is + counter to the aims of the project, and the project will eventually be engaging in + hardware and firmware level improvements rather than only offering suggestions and bug + reports upstream for those areas. Much of the work on the project involves changes + that are specific to different devices, and officially supported devices are the ones + targeted by most of this ongoing work. GrapheneOS also has source level support + without device-specific hardening for the Android emulator, HiKey, HiKey 960 and also + generic targets providing basic support for many other devices.

+

Devices need to be meet the standards of the project in order to be considered as + potential targets. In addition to support for installing other operating systems, + standard hardware-based security features like the hardware-backed keystores, verified + boot and attestation need to be available. Devices with support for alternative + operating systems as an afterthought will not be considered. Devices need to have + proper ongoing support for their firmware and software specific to the hardware like + drivers in order to provide proper full security updates too. Devices that are + end-of-life and no longer receiving these updates will not be supported.

+

In order to support a device, the appropriate resources also need to be available + and dedicated towards it. Releases for each supported device need to be robust and + stable, with all standard functionality working properly and testing for each of the + releases.

+

Hardware, firmware and software specific to devices like drivers play a huge role + in the overall security of a device. The goal of the project is not to slightly + improve some aspects of insecure devices and supporting a broad set of devices would + be directly counter to the values of the project. A lot of the low-level work also + ends up being fairly tied to the hardware.