“Android Auto support for our sandboxed Google Play compatibility layer has been merged into GrapheneOS…””The implementation uses the compatibility layer to eliminate most of the special privileges that are usually required. It provides 4 permission toggles for enabling different access for wired Android Auto, wireless Android Auto, audio routing control and phone call control.””No special access is granted by default. We’ve made subsets of the standard privileged permissions for these toggles for granting only minimal required access. Wired Android Auto is close to working with 0 special access required but not quite so it still needs a toggle.”
What’s new
Keyboard: add new implementation of multi-locale spell checking support to fix crashes and other issuesSandboxed Google Play compatibility layer: add Android Auto support with the compatibility layer eliminating the need for most of the permissions and a permission menu with 4 toggles for granting the minimal special access required for wired Android Auto, wireless Android Auto, audio routing and phone callsSettings: remove confusing mention of Android Auto from Connected devices screenexempt non-app system processes from Sensors permission enforcement (fixes some issues including gpsd crashes)fix Bluetooth auto-turn-off race condition to avoid crasheswork around upstream race condition bug in biometric servicedisable support for pre-approving PackageInstaller sessions due to incompatibility with Network permission togglefix several upstream bugs in handling crash reports mainly to improve our user-facing crash reporting systemuse GrapheneOS Widevine provisioning proxy by defaultadd settings for changing Widevine provisioning serveradd configuration for setupdesign and setupcompat libraries to improve system UI themekernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.204kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.142kernel (Generic 6.1): initial port of GrapheneOS changes for use with emulator buildsforce disable network ADB in early boot to improve verified boot security (no user-facing change since it’s currently disabled by default later in the boot process, but not robustly)Vanadium: update to version 120.0.6099.115.0Vanadium: update to version 120.0.6099.144.0AppCompatConfig: update to version 2GmsCompatConfig: update to version 88GmsCompatConfig: update to version 89GmsCompatConfig: update to version 90Auditor: update to version 78