3 ms·
Sounds like they do this: https://lineage.microg.org/#faq7 https://lineage.microg.org/#faq7 > Moreover, to further strengthen the security of our ROM, we modif
by SifJar 9y ago
Sounds like they do this: https://lineage.microg.org/#faq7 https://lineage.microg.org/#faq7
> Moreover, to further strengthen the security of our ROM, we modified the signature spoofing permission so that only system privileged apps can obtain it, and no security threat is posed to our users.
- amluto 9y agoSure, but did they submit a patch like that to Lineage OS? As far as I can tell, they didn't.
- larma 9y agoThe patch was submitted, it's unfortunately not visible to the public: https://review.lineageos.org/194562 https://review.lineageos.org/194562
- deleted 9y ago[deleted]
- petecox 9y agoIt seems like such a small one method change, in the context of forking an entire distro. I wonder if PackageManagerService is hard coded in many places, rather than using XML dependency injection. If the latter then may it be possible to override the method in a subclass, e.g. MicroGPackageManagerService and distribute the change via a once-only installable zip? That way Lineage OS doesn't need to break security, only downstream.