security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

explain user-facing impact of enforced fs-verity

Browse Source
This commit is contained in:
Daniel Micay 2023-02-02 01:20:34 -05:00
parent b18eb119aa
commit d920f4a470
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
static/releases.html
View File

@ -687,6 +687,13 @@
they updated to newer system app versions than the ones bundled in the new OS
update.</p>
<p>Since fs-verity is now fully enforced for installing system app updates,
they can only be installed from our app repository providing the fs-verity
metadata. This happens automatically via our app repository client, but you
could manually download packages and fs-verity metadata to manually install
them. OS releases bundle the latest releases of the bundled components so the
out-of-band updates are simply a way to get updates quicker.</p>
<p>This release also supports out-of-band updates for Vanadium going forward
due to replacing incompatible SELinux hardening with these far superior
verified boot improvements along with fixing a major upstream Android 13