diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2023-01-25 07:32:55 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2023-01-25 07:32:55 -0500 |
| commit | 6970fafb37633473ffe39a2e18c053398bf565d6 (patch) | |
| tree | 7c3ba588ab3e6389e60deec8af9c462f0ce43cf0 | |
| parent | 4f82c8834e8f414890bd4ca464ea02b89fbd4674 (diff) | |
defer SELinux policy changes for Vanadium
| -rw-r--r-- | static/releases.html | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/static/releases.html b/static/releases.html index 2b810740..80f58314 100644 --- a/static/releases.html +++ b/static/releases.html @@ -692,7 +692,6 @@ <li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/13">version 13</a></li> <li>add GrapheneOS fs-verity public key as a supported key</li> <li>require fs-verity for system app updates</li> - <li>SELinux policy: drop base OS apk_data_file restrictions to avoid blocking out-of-band updates to system apps providing native libraries such as Vanadium since we're going to be taking the approach of enforcing fs-verity for system app updates as a complete approach to proper verified boot enforcement for every read of data from out-of-band system component updates instead of only disallowing some forms of out-of-band updates</li> <li>Vanadium: update Chromium base to 109.0.5414.118</li> <li>SettingsIntelligence: drop no longer required QUERY_ALL_PACKAGES permission now that more precise queries are defined upstream providing the necessary package visibility for Settings app search</li> </ul> |