diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-05-02 16:35:09 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-05-02 16:36:00 -0400 |
| commit | 2bf3500c6653fba9d78df439cbfdddd3bb241d80 (patch) | |
| tree | 96add73d689aaf53af009d9c602c99ed1277d68d | |
| parent | 6f1581b92c70fa25f4429fa95cb6e8767e62ce9a (diff) | |
package manager hardening and other changes
| -rw-r--r-- | static/releases.html | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 0b14cf17..28362452 100644 --- a/static/releases.html +++ b/static/releases.html @@ -751,6 +751,9 @@ <ul> <li>enable heap memory tagging for vendor processes by default, remove the user-facing toggle in the Settings and restrict toggling the value to debug builds</li> <li>disable most handling for instant apps in the package manager as attack surface reduction</li> + <li>disable out-of-band APEX updates as attack surface reduction</li> + <li>only allow first party app source and shell to update system packages</li> + <li>improve robustness of original-package handling</li> <li>Settings: hide GNSS SUPL and PSDS settings on devices without GNSS hardware</li> <li>fix regression from our Android 14 QPR2 port causing Storage/Contact Scopes link to disappear after going back to the permissions screen</li> <li>improve setup wizard theme to more closely match the stock Pixel OS configuration</li> @@ -768,6 +771,7 @@ <li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/124.0.6367.113.0">version 124.0.6367.113.0</a></li> <li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/23">version 23</a></li> <li>work around our app repository client taking ownership of updates for the debug toggle we use to test new Android Auto releases</li> + <li>fix debug build option for testing same versionCode package updates</li> </ul> </article> --> |