summaryrefslogtreecommitdiff
path: root/static
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2025-03-30 11:27:09 -0400
committerDaniel Micay <daniel.micay@grapheneos.org>2025-03-30 11:27:31 -0400
commitf419bef0c447dbb6e2df6f01dcbd8c0c68ef98e5 (patch)
tree21652cdc77488bc28192a39cefdd86be0b956e6c /static
parentf25753dbcdb29bdf60e0f6d651c1495de06411e2 (diff)
make ADD_USERS_WHEN_LOCKED/ENABLE_EPHEMERAL_FEATURE immutable
Diffstat (limited to 'static')
-rw-r--r--static/releases.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/static/releases.html b/static/releases.html
index 60539c88..f9dc2d6c 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -579,7 +579,7 @@
<li>fix upstream system_server crash from null pointer exception in F2fsUtils</li>
<li>add infrastructure for more restricted access to global and per-user settings instead of allowing all system apps to read them and all privileged systems apps with the WRITE_SECURE_SETTINGS privileged permission to write them</li>
<li>further restrict access to all global and per-user settings added by GrapheneOS with our new infrastructure</li>
- <li>prevent privileged system apps from writing the standard Android ADD_USERS_WHEN_LOCKED and ENABLE_EPHEMERAL_FEATURE settings we disable each boot for attack surface reduction</li>
+ <li>make the value of the ADD_USERS_WHEN_LOCKED and ENABLE_EPHEMERAL_FEATURE settings we disable at boot explicitly immutable instead</li>
<li>kernel (6.6): update to latest GKI LTS branch revision</li>
<li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/135.0.7049.38.0">version 135.0.7049.38.0</a></li>
<li>GmsCompatConfig: update to <a href="https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-155">version 155</a></li>