security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

make ADD_USERS_WHEN_LOCKED/ENABLE_EPHEMERAL_FEATURE immutable

Browse Source
This commit is contained in:
Daniel Micay 2025-03-30 11:27:09 -04:00
parent f25753dbcd
commit f419bef0c4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
static/releases.html
View File

@ -579,7 +579,7 @@
<li>fix upstream system_server crash from null pointer exception in F2fsUtils</li>
<li>add infrastructure for more restricted access to global and per-user settings instead of allowing all system apps to read them and all privileged systems apps with the WRITE_SECURE_SETTINGS privileged permission to write them</li>
<li>further restrict access to all global and per-user settings added by GrapheneOS with our new infrastructure</li>
<li>prevent privileged system apps from writing the standard Android ADD_USERS_WHEN_LOCKED and ENABLE_EPHEMERAL_FEATURE settings we disable each boot for attack surface reduction</li>
<li>make the value of the ADD_USERS_WHEN_LOCKED and ENABLE_EPHEMERAL_FEATURE settings we disable at boot explicitly immutable instead</li>
<li>kernel (6.6): update to latest GKI LTS branch revision</li>
<li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/135.0.7049.38.0">version 135.0.7049.38.0</a></li>
<li>GmsCompatConfig: update to <a href="https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-155">version 155</a></li>