#GrapheneOS version 2024050300 released.
This update contains various hardening additions, fixes Google Fi eSIM activation (again) and changes OS infrastructure to prepare for an upcoming App Communication Scopes feature.
See the changes:
- remove special handling of the resolver activity ("Open with..." dialog) which was added to Android in order to support instant apps as preparation for our in-development App Communication Scopes feature
- fix Google Fi eSIM activation
- improve isolation of the eSIM activation apps
- improve GrapheneOS infrastructure for per-app state
- enable heap memory tagging for vendor processes by default, remove the user-facing toggle in the Settings and restrict toggling the value to debug builds
- disable most handling for instant apps in the package manager as attack surface reduction
- disable out-of-band APEX updates as attack surface reduction
- only allow first party app source and shell to update system packages
- improve robustness of original-package handling
- Settings: hide GNSS SUPL and PSDS settings on devices without GNSS hardware
- fix regression from our Android 14 QPR2 port causing Storage/Contact Scopes link to disappear after going back to the permissions screen
- improve setup wizard theme to more closely match the stock Pixel OS configuration
- backport mainline APEX module patches for Android Health, Media Provider, Network Stack, and Wi-Fi
- kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.212
- kernel (5.15): update to latest GKI LTS branch revision including update to 5.15.150
- kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.80
- Log Viewer: use human readable UTC time for logcat timestamps
- GmsCompatConfig: update to version 109
- Vanadium: update to version 124.0.6367.113.0
- Apps: update to version 23
- work around our app repository client taking ownership of updates for the debug toggle we use to test new Android Auto releases
- fix debug build option for testing same versionCode package updates
final [GrapheneOS] 📱👁️🗨️
npub1c9d…sqfm
2024-05-04 07:59:31
Author Public Key
npub1c9d95evcdeatgy6dacats5j5mfw96jcyu79579kg9qm3jtf42xzs07sqfmPublished at
2024-05-04 07:59:31Event JSON
{
"id": "b76575b737ca3a69fb777646fe804310cfd0dd9ec2207cd2d36b769ebde9de4d",
"pubkey": "c15a5a65986e7ab4134dee3ab85254da5c5d4b04e78b4f16c82837192d355185",
"created_at": 1714802371,
"kind": 1,
"tags": [
[
"t",
"GrapheneOS"
],
[
"t",
"grapheneos"
]
],
"content": "#GrapheneOS version 2024050300 released.\n\nThis update contains various hardening additions, fixes Google Fi eSIM activation (again) and changes OS infrastructure to prepare for an upcoming App Communication Scopes feature.\n\nSee the changes:\n\n- remove special handling of the resolver activity (\"Open with...\" dialog) which was added to Android in order to support instant apps as preparation for our in-development App Communication Scopes feature\n- fix Google Fi eSIM activation\n- improve isolation of the eSIM activation apps\n- improve GrapheneOS infrastructure for per-app state\n- enable heap memory tagging for vendor processes by default, remove the user-facing toggle in the Settings and restrict toggling the value to debug builds\n- disable most handling for instant apps in the package manager as attack surface reduction\n- disable out-of-band APEX updates as attack surface reduction\n- only allow first party app source and shell to update system packages\n- improve robustness of original-package handling\n- Settings: hide GNSS SUPL and PSDS settings on devices without GNSS hardware\n- fix regression from our Android 14 QPR2 port causing Storage/Contact Scopes link to disappear after going back to the permissions screen\n- improve setup wizard theme to more closely match the stock Pixel OS configuration\n- backport mainline APEX module patches for Android Health, Media Provider, Network Stack, and Wi-Fi\n- kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.212\n- kernel (5.15): update to latest GKI LTS branch revision including update to 5.15.150\n- kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.80\n- Log Viewer: use human readable UTC time for logcat timestamps\n- GmsCompatConfig: update to version 109\n- Vanadium: update to version 124.0.6367.113.0\n- Apps: update to version 23\n- work around our app repository client taking ownership of updates for the debug toggle we use to test new Android Auto releases\n- fix debug build option for testing same versionCode package updates",
"sig": "cfca25aaf1463f45cbb36a79c2ec5f3a2ceee8c01747966a5d360b67014cf8490ef156d77c281bb70d09e13a9a9816c10819c0f207515051949b11cadab313a0"
}