diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2023-01-24 20:44:40 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2023-01-24 20:44:40 -0500 |
| commit | 25cc619955e6bcf5d42155cfd5656ab615ef1bf7 (patch) | |
| tree | e229444f81abae7703cd3fb6ccb0f0a70bd15de9 /static | |
| parent | 316d62db46fb3e562495cb07a289797878f3b687 (diff) | |
drop base system apk_data_file restrictions
Diffstat (limited to 'static')
| -rw-r--r-- | static/releases.html | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 44b9d70f..0dd50e3e 100644 --- a/static/releases.html +++ b/static/releases.html @@ -692,6 +692,7 @@ <li>Apps: update to <a href="https://github.com/GrapheneOS/Apps/releases/tag/13">version 13</a></li> <li>add GrapheneOS fs-verity public key as a supported key</li> <li>require fs-verity for system app updates</li> + <li>SELinux policy: drop base OS apk_data_file restrictions to avoid blocking out-of-band updates to system apps providing native libraries such as Vanadium since we're going to be taking the approach of enforcing fs-verity for system app updates as a complete approach to proper verified boot enforcement for every read of data from out-of-band system component updates instead of only disallowing some forms of out-of-band updates</li> <li>Vanadium: update Chromium base to 109.0.5414.118</li> </ul> </article> |