Vanadium is both the browser and the webview, you might be able to install the browser but the issues you come across will be for you to resolve since the goal of Vanadium is be both the hardened browser and webview for GrapheneOS

there are policies in GrapheneOS that work in synergy with Vanadium's hardening, there is a lot more detail in it than i can describe, but the logs and the devs could provide more insight

this explanation is a huge simplification that leaves out a lot of technical details

<aeonsolution[m] "Vanadium is both the browser and"> I know, only i'll want know if this, will be possible

its possible to install it, theres no gurantee itll work and you'll have to do the updates on your own since Vanadium doesnt have a dedicated update server. it gets updates when GOS gets a new release

like i mentioned before, the issues you come across will be for you to resolve because Vanadium isn't developed for OSes other than GrapheneOS at this point in time

Still can't get it to work

Every time I get a voicemail, I go to the voicemail tab - nothing, i click on the new voicemail notification - it calls the voicemail box and I can retrieve my voicemails

* Every time I get a voicemail, I go to the voicemail tab in the phone app - nothing, i click on the new voicemail notification - it calls the voicemail box and I can retrieve my voicemails

I'm using the stock phone app for Graphene

<aeonsolution[m] "its possible to install it, ther"> How its possible? I want to try it. Dont care if dont work. I read a awesome words about this browser

Vanadium is for GrapheneOS

we don't make builds for other OSes and we include functionality for it in the OS rather than the browser

such as the hardened allocator in the OS

<strcat[m] "Vanadium is for GrapheneOS"> Okey. No more questions.

I know my carrier is compatible with Visual Voicemail, so I don't need to do anything with my carrier, I should just be able to do it all from the phone, right?

<dcosk[m] "Okey. No more questions. "> You'll find it on glassrom too. It replaces the (now) dead glassrom browser

Pixel 4a tags were finally pushed in case anyone is interested in working on that

need android-prepare-vendor support of course

im building the Pixel 4a right now with this tag android.googlesource.com/device/goo…fish/+/refs/tags/android-10.0.0_r45

cdesai shared the info

Tracking progress on #AOSPAlliance

Pixel 4a for graphene? Its the only reason why I haven't bought one as of yet.

cdesai: there's one thing you really need to track

What

Did you fix the DTC issue

Merged revert for now

Here's basically what happens

I did a boot to recovery

Recovery complained it could not find misc

Check gerrit I left a comment for options for coral that wouldn't affect other devices.

Tried flashing

Failed

Understood what was up

Storage never initialized

Ah

Restoring dtbo fixed it

Was DTC issue from that commit

Also idk what exactly that commit does

Its off topic here anyway but I merged a revert already

But I've been struggling with this for 4 days

:(

Basically clean build + that commit -> doesn't boot

dirty build + reverted -> doesn't boot

Clean build + revert -> boots

Idk why but this is the reason I've been struggling with it for all that time

Also cdesai I for one ain't going to the lineage gerrit

They aren't going to support glassrom stable kernels anyway

And I am not using that messed up kernel lineage has for op7

cdesai: review.lineageos.org/c/LineageOS/android_device_google_wahoo/+/271045

Adapt this instead

No that won't work

That's prebuilts which is too old and $out isn't set when BoardConfig is included

...

Just edit it to what you did in vendor

That's exactly how it's done on grapheneos

That's exactly how lineage implements linkage again clang lld for the kernel

* That's exactly how lineage implements linkage against clang lld for the kernel

It should look like

TARGET_KERNEL_ADDITIONAL_FLAGS := \

DTC=$(KERNEL_BUILD_OUT_PREFIX)$(DTC)

Go ahead, try that.

Kernel_build_out_prefix just isn't available, the variables it needs just haven't been set when the build system includes boardconfig

If it was so simple why would I even do that change.

And again, this is all off topic for this channel

Solution 2: just update DTC and call it a day

No settings that I see on my carriers website.

Anyone have any ideas?

faxing: Verizon visible?

I'm using Mint Mobile

They're a T-Mobile MVNO

What device?

Pixel 3a XL running GrapheneOS

Can't do much for that sadly

Oh

Okay, Thanks

* Okay, thanks anyway

what are you trying to do faxing

I'm just trying to get Visual Voicemail to work

I've been trying all of today and a while yesterday with no success

brockin042: don't get your hopes up, this is a first for me and i see the learning process being very painful

aeonsolution: if you have a 3a I can point you to the direction you need to look in

But I can't do anything without the phone myself

yeah i have a pixel 3a too

cool, i can help there

So now after trying to troubleshoot on my own for this long I figured I'd try and hope that someone here could help

whenever I get a voicemail I just get a notification to call my voicemail box but when I go to the voicemail tab in the stock phone app i see nothing

anupritaisno1: anything helps

it works if I call the voicemail box but it's a pain if I don't have to

let me see what i can figure out

Oh great

Accidentally compiled with that commit. This issue is going to haunt me for a while it seems

cdesai: github.com/GlassROM-devices/kernel_google_coral/commits/10

Hey folks, quick question: I have fallen two releases behind on updates (was using a different phone). This the device still auto-update, or do I need to reinstall?

> Hey folks, quick question: I have fallen two releases behind on updates (was using a different phone). This the device still auto-update, or do I need to reinstall?

You'll be fine, just let it auto update

Great! Thank you, I appreciate it.

🤘

word to the wise...make sure time/date are correct before hoping for an update haha

P4xl here on stable channel. My camera does a weird thing. There seems to be a lag from pressing the capture button. Sometimes it can take up to 10 seconds for the press to register.

Same exp using builtin camera and open camera. Verified using both the volume up key and the regular capture button on the screen.

If I'm buying a new phone how should I decide between Pixel 4a or iPhone SE? I hear this is the place to ask

justifiablemadness: matrix.to/#/!NKqyWWNTlbuXwOPMCt:matrix.org

The offtopic chat is what you are looking for

or search logs freenode.logbot.info/grapheneos

cn3m: that link is bad

invited you directly

<cn3m[m] "invited you directly "> Can you Invite me too? (:

Ok

Thanks

shdudbdjdj: done

Thanks (:

22

renlord

Can you reword this to

"Remove sepolicies for several apps where it isn't required or the app isn't included in the base system"

anupritaisno1[m]: does that DTC port work?

cdesai: that's pretty much what every device is doing

Just one thing

Do not upstream beyond that version

anupritaisno1[m]: ok done

hello anyone here?

arept: yes

i want to install graphene on a refurbished pixel 3a. Propably buying it online. Since you need a unlocked device, is there a way to see if it is unlocked, in the settings or something? Is there anything else important it needs for the installation to work?

I just make SURE the phone was purchased NEW UNLOCKED. So long as that's the case it should be fine. I buy my phones second hand and if I can't verify it was factory unlocked I give it a miss.

so i should just ask for a pic of something proving it is unlocked like the manual or sth

is there something that ships with the phone that proves its unlocked?

<anupritaisno1[m] "That's exactly how it's done on "> Autopsy: When I went to make a call on my 3axl yesterday I saw at the top of the listings of received calls the phone symbol w/' Voicemail ' next to it. I tapped on it and a robot operator comes on and instructs to enter my password. On the third attempt robofem replies "I'm sorry you're having this difficulty." This morning on the drawdown from the top edge

of the pixel one of the line messages is, ' 2 Voicemails Dial +1 248-224-0128. I called this number with my iPhone6, which no longer has a sim and uses the WiFi to connect phone calls, and the called number immediately fails. Very strange.

Sounds very fishy to me.

Like, it sounds like they're trying to phish you.

Does the voice sound like your normal voicemail from your carrier?

Hi, how can I make a search within this channel?

freenode.logbot.info/grapheneos and use the searchfield?

Thx

Autopsy: yes it does sound like an automated voicemail operator.

What version of riot are you using, just got now a message to install element and uninstall riotx?

rafff: riot and RiotX are discontinued, likely best installing element

there are other matrix clients by other developers, but element is OK(ish) and under heavy active development

its basically RiotX with a new name

The other option that is also OK(ish) is fluffychat

they have their own fdroid repository with their app

<dazinism "rafff: riot and RiotX are discon"> OK thx, will try element then

Currently both of them miss some features and have some bugs which can be annoying

I am going to re-install GOS. When I first got this phone I installed GOS before I did anything with it. Afterwards I did download some questionable apps which I uninstalled soon after. Then while using Vanadium this pop up page appears from yourphoneboost.com with the message Cleaner Update for Phone is recommended. Your phone Phone can work faster. We released a Cleaner update, and it is recommended for every

phone. Mistakenly, I clicked on it, after it repeatedly came on every time I used that browser. When I finally clicked on it, it change screens but didn't seem to be doing anything. I restarted the phone and stopped using Vanadium. Now I'm convinced this phone has been inflected. I opened Vanadium this morning and first thing this same page appears with a countdown clock to update. I'll be back on after new GOS

is installed.

How about you change the home page of the browser, or erase the browser's app data, and try again?

It is persistent and not responsive.

It has taken over Vanadium browser.

<applescruff_53[m "It has taken over Vanadium brows"> Have you tried clearing app data?

I just did that and it appears to have solved that issue.

😊

there you go, we saved you an entire day's of phone setup

Thank you, I was not looking forward to that job.

For now I am going to just ignore the 2 Voicemails notice on my phone call listings.

<arept "i want to install graphene on a "> I have had very good experiences with swappa.com. They are usually always accurate with determining carrier versions. I believe the first two numbers in the IMEI determine the model as well. For instance my pixel 3 begins with 99 which tells me it's a Google edition unlocked.

Swappa seems US only. Is there international alternative?

<blueuser[m] "faxing: did u managed to get vis"> I got a few voicemails to show up, but only older ones that I haven't had time to delete yet. I had someone leave me a voicemail and it didn't show up and some of the newer ones didn't show up either, but I can still get them if I call the voicemail box

<xmwv[m] "Swappa seems US only. Is there i"> ebay?

<faxing[m] "ebay?"> Maybe Gazelle or Glyde

<xmwv[m] "Swappa seems US only. Is there i">

Who has issues with screen flickering in GOS on p4s

Yes you're not the first to ask that. They commented on it earlier I believe it has something to do with the 90 HZ refresh rate, but I could be wrong

<retry0x[m] "Who has issues with screen flick"> Sup?

@retry0x:matrix.org: it's mostly gone away after the latest updates for me

ymmv

but yeah, if it's persisting, you can switch to 60hz mode and that will fix it

ruddo: I am wondering, is there a method to reset my password for the OS?

Yes, from the Settings -> Security -> Screen lock panel.

ruddo: OK, that is the password for the screenlock. Good.

On the phone app there is Voicemail. How do I get or change my Voicemail password?

The Voicemail # is 1-248-224-0128

I have two messages but I don't have a password.

Are you calling that number specifically and it says you have two voicemails, is there a notification on your phone stating you have two voicemails, or are you calling YOUR PHONE PROVIDER'S voicemail service and they are telling you you have two voicemails?

it's just some kind fo scam

Exactly

Phone Phishing

hi

they probably hope that people give some real password and so they can get control over your accounts

<M1enrique3[m] "hi"> Hello

possible to change the allowed amount of fingerprint reader attempts?

pixel1 reader sucked... now the pixel3a reader works really well.. so if it doesn't work on the 1st or 2nd attempt, then I want it to force whomever stole it to use the pin code :)

does the google pixel 4 works good with graphene os?

yup

no complains

oh

sometimes camera app crash

but i was told to use opencamera

aslo they are still working on the screen

refresh rate

and how long would it take to get support to 4a

cause it taken months to get support for pixel 4

above my knowledge

alright

<M1enrique3[m] "and how long would it take to ge"> When Google releases the AOSP branch for the 4A and then having someone step up to maintain the phone for GrapheneOS.

they released it already

Link?

on android googlesource com it's the sunfish device

Ah, released yesterday lol

why new pixels require to connect to internet to unlock bootloader, what kind of informations do it send?

once you have done it the first time to install grapheneos and relocked the bootloader, do you need to connect to internet the next times that you want to unlock it?

<blueuser[m] "why new pixels require to connec"> You mean the Pixel 4[a] [XL]? Because to my knowledge, Pixel 3[a] [XL] doesn't do that. About what kind of informations that sends, it might be some stuff that identifies the device, but I am not sure

blueuser: Pixels do not require it

it's not a hardware/firmware thing

the stock OS has factory reset protection as an anti-theft feature, this is explained in the FAQ

read the FAQ

Hello guys, I ran fastboot flashing get_unlock_ability on my new pixel 3 xl (which is unlocked) and it is returning 0

Is there any hope for me to put GrapheneOS on this device?

Hello guys, I ran fastboot flashing get_unlock_ability on my new pixel 3 xl (which is unlocked) and it is returning 0

Is there any hope for me to put GrapheneOS on this device?

I can enter developer mode on a clean factory reset, then go into the developer options and the OEM unlock is greyed out

And the bootloader confirmed that it is LOCKED

bkeys: Is this a Pixel from Verizon?

No

The bootloader says nothing about it, there is no verizon logo physically on the device

No verizon logo at boot or anything like that; it was also listed as unlocked

<bkeys "No verizon logo at boot or anyth"> When people sell unlocked, they usually mean sim free, not bootloader.

Most people don't care and/or have no idea about that stuff.

Searched the logs... Check this bkeys

Put in your IMEI number

If it says anything to do with Verizon, you're screwed and you should return the phone.

bkeys: was it used

Quick way to get IMEI is *#06* from the dialer.

Also look at the original box, if it came with it, and see if it says anything.

nikitalita[m]1: Yes it came used

Autopsy[m]: Where would I put in the IMEI number?

Nevermind I see it

Autopsy[m], jpds: I punched it in on Google, and it is saying nothing about Verizon

yup

Has anyone been having trouble getting Signal notifications recently? On my Pixel 3a running GOS I think they stopped showing up sometime in the past couple days, and I can't really figure out what's happening. The in-app and out-of-app settings for notifications are both on, and I just redownloaded the APK from their site to make sure I didn't accidentally update it through Aurora, but I'm still not getting any.

My guess is I am going to have to return this thing?

it's possible it's a verizon phone and its just not showing the logo, and its also possible it's a verizon phone that was soft-unlocked and then sold on as an unlocked phone (not sure if you can actually do this with Pixel 3s though)

I mean doesn't Verizon usually stamp their logo on phones they lock?

bkeys: either way, use the tool that autopsy linked

I did

That tool is not saying anything about Verizon

You'll have to use a Google account... Either make one up or use the one you have (assume you have one, most people do), then follow the web page and input the IMEI when Google tells you to

I did that

I already did that

It is not saying anything about Verizon

Disclaimer, I've never used it - I'm merely suggesting what someone already has previously.

I know but I cannot find any evidence that this phone was locked by Verizon

I signed in using a google account, the oem unlock is still greyed out

So it is still greyed out

bkeys: i'd just return it

Have you updated to the latest version?

Autopsy Yes it is the lastest version

nikitalita[m]1: I probably will end up doing that

I am talking with google customer support confirming or denying my fate

there are a number of things that could have happened here, none of them good

Yeah, for sure.

Have you tried factory resetting yet, just in case?

do you have a sim card in this now? if so, which network?

You can use Google's web page to flash the latest update and whatnot

Yes SIM card, Visible

Is this something I can avoid or am I just gonna have to keep ordering and returning phones until I get a good one?

@bkeys no, what you can do is ask the seller to check to see if OEM unlocking is able to be toggled on or off prior to them selling the phone.

Yeah other than that I mean

No keyword to look out for

Nothing, really. You got the 3XL, yeah?

Yes

All variations use the same G013C code, regardless.

If the item has the box in the eBay listing (as an example) look at the photos and see if anything mentions Verizon. Also see if the seller has listed it being used on Verizon in the past. Other than that, you're just going to have to do what I said regarding asking them to toggle the OEM switch. You *may* have to guide them through that, though, as they might not know what they're doing.

As a side note.. The IRC / Matrix Bridge is a bit buggy. There aren't many Matrix messages coming through, at least from my side.

it have been buggy for months now

yeah, you could make the seller show the oem unlock option on the phone

I've been burned on stuff like this before; I got an iphone that was sold as unlocked but it was actually just jailbroken and soft-unlocked, which meant that after a factory reset it was locked again.

in general i just dont trust used phones if i'm going to be using this as my daily driver

Well is there a way I can buy a Pixel 3 XL that is certain to be OEM unlocked?

Sorry we can't be any more help than that, bkeys :(

It is fine y'all have been helpful

bkeys: why a pixel 3 xl specifically

I am going up and down eBay asking all the 3 XL sellers if their phone is OEM unlocked

Well, Google have stopped shipping them a while back. Apart from having potluck with the device, it's just asking the seller.

Haha

nikitalita[m]1: I like bigger screens, I want GrapheneOS support, and it needs to work on Visible

3 XL does all of those

better wait for the 4a no? it will have much longer support

I am not at all a heavy phone user

I live out in the country and 99% of this thing will just sit there and be a wifi hotspot

bkeys: again, the only real way to know for sure is if they actually show you a picture of the settings screen showing that the oem unlocking option is toggleable

*Duelling Banjos intensifies*

I will be certain to ask for screenshots if any of them say yes

man, love duelling banjos

I love banjos in general

bkeys, if it makes any difference, I usually go for sellers that are obviously just selling them because they've got an upgrade. A lot of the time, those are the nicer ones to communicate with.

btw, a question for anyone who knows, since I don't know really anything about rooting: can I root my grapheneOS pixel 3a? That is, will rooting it delete data/brick the phone?

ik that magisk by itself supports the 3a, I'm just not aware if having grapheneOS on it will mess with the rooting or vice versa

Unsupported here, botter otter

? as in grapheneOS doesn't support rooting, or this isn't the place to ask, or?

both

While rooting can be done, it pretty much negates the security that is built into GrapheneOS. Using it will mean bypassing the verified boot, and having a tonne of extra attack surface.

not recommended to root your phone at all

The question is: Why do you want to root your phone?

Guise, so if the seller says it is "Verizon unlocked" then I want to avoid it, yes?

bkeys, yes

yes

nothing important, just was going to if it was convenient/not an actively bad idea to do

it may not be locked to verizon, but the bootloader is still locked

if it opens up a bunch of security vulnerabilities then I won't root it

That is what I thought

botter_otter, no worries, it's totally normal to ask. Tbh, before GrapheneOS, I genuinely thought root was the answer to my prayers regarding privacy and security; how wrong I was.

anyway, thanks for the info

The seller of the device I have now does not accept returns, but it is eBay so there is some hope I will not get burned

I guess worst case I resell it

possible to change the allowed amount of fingerprint reader attempts?

* first one

I don't think so

I believe that may be controlled by the hardware?

nikitalita[m]1 that a reply to my question? sry not sure

derpy: yes, that's right. I dont think you have the ability to set the number of attempts, at least I don't see it on the Pixel 2

it's hardcoded in source but maybe it's different for pixels with titan m idk

pixel 3a here... would be a good question for one of the main devs...

having the right balance seems key for security & convenience

I think 3 attempts and then failing to the pin code forever is ideal

that way if you get caught having to unlock it you could purposefully use the wrong finger :)

and the conveniently forget your pin code

yeah, I think the Titan-Ms rate-limit PIN and password entry on the Pixel 3-4s, not sure if that extends to fingerprint attempts

Let's check pins

5 times and it locks for 30 seconds

Incorrect using the pin 5 times ^

And 5 times for face unlock causes the face unlock to be disabled.

so in the time of an hour someone could try all of your fingerprints

so if you don't want that attack vector you have to not use the fingerprint scanner at all

:(

Damn... Will have to look into if it can lock fingerprint scanner after x attempts -> pincode

Try another finger a few times.

so it does say "too many attempts. fingerprint disabaled"

I wonder how long

Indefinitely

oh sweet

ok so it is smart

just 5 attempts is the max

not bad

just gotta get the person torturing you to use your index fingers or something

haha

use a toe

hahha security master!

the torturer will never guess

:')

oh that's a grapheneos feature

on non graphene roms it just lock the fingerprint for a moment and allow you to use it again after a while

or after 20 attempts it block it indefinitely

use a password

* oh that's a grapheneos change

<bkeys "nikitalita: I like bigger screen"> When I installed GOS 2+ months ago, Visible service would not work with GOS. Search the logs above for "Visible". Hate to see you go to all the trouble of finding a non-Verizon Pixel 3XL (which I also have incidentally) only to find the service won't work. FWIW I switched to PureTalk USA- low cost, high data, great coverage in my region. YMMV. Good luck.

I believe that's been recently fixed

Search for Verizon in the os issue tracker

That could be true- I have no idea. Since it was no longer relevant to my situation, I didn't follow up. But I do try to scan this board almost every day and hadn't noticed any talk of Visible. But you're right- a search is in order.

derpy: You can also enable the lockdown feature in Display > Lock screen display

jpds right, tnx

Hold down the power button, hit Lockdown, no fingerprints

blueuser[m] didn't know about it... its a good choice, glad to have GOS

jpds if I hold power, I see: power off, restart, screenshot, emergency

you need to enale lockdown in settings if i remember

* you need to enable lockdown in settings if i remember

ah got it tnx

@freenode_bkeys:matrix.org did you have a network connection when you tried to do the OEM unlock toggle?

I and another guy have been censored when we spoke about that exactly 3H ago lol " Pixels do not require it" "go read the faq"

the other guy said only newer devices such as the 4a require it

* the other guy said only newer devices such as the 4 require it

«I and another guy have been censored

Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious»

* «I and another guy have been censored»

Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious

* «I and another guy have been censored»

Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys.

Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious

what

* «I and another guy have been censored» \n Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. \n Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks

real suspicious

what do i mean, anyways it seems to be a part of the anti theft feature that grapheneos do not use

* what do u mean, anyways it seems to be a part of the anti theft feature that grapheneos do not use

<blueuser[m] "what do i mean, anyways it seems"> Yeah, sounds like the most logical explanation to this

Autopsy: your response earlier about Magisk, etc. is not really correct since if you are using any of those things you aren't using GrapheneOS in the first place since major portions of it are replaced with other things

it's not just that it cripples the security model and adds substantial attack surface

it is not GrapheneOS, it cannot use the official updates, it cannot be locked with verified boot since it isn't GrapheneOS and isn't signed with the GrapheneOS keys

Auditor will show that it isn't GrapheneOS

Autopsy: also the throttling for unlock attempts is not simply a 30 second lockout every 5 tries - that's wrong

derpy: the information above about unlock attempts and fingerprinting unlocking is wrong

* derpy: the information above about unlock attempts and fingerprint unlocking is wrong

<strcat[m] "Autopsy: also the throttling for"> The first five tries are. I didn't say every five tries.

fingerprint unlocking has a hard limit of 5 attempts on GrapheneOS

the primary unlock method has an exponentially increasing lockout timer with hardware enforcement (for decryption) up to 1 day

the only differences compared to the stock OS is that the hard lockout for fingerprints is 5 instead of 20 and the non-managed password length limit is 64 instead of 16

blueuser: posts containing misinformation are removed from the Matrix scrollback history

it's likely that the IRC logging will be ended

it's not

if you aren't on GrapheneOS the official GrapheneOS updates via the official update client will not work

if you modify the OS it is not GrapheneOS

you will not have functional updates and Auditor can confirm that it is not GrapheneOS

this channel is about GrapheneOS, not derivatives/forks of it

Daniel

Can you root GrapheneOS?

I don't know what you mean

if you build a userdebug build it has `adb root` and `su` for `adb shell` but that's a debug build, not a production release

Can a user root GrapheneOS?

Is it recommended? No.

Can they? Yes.

no, they can't

that's not GrapheneOS

unless you mean making a userdebug build

And I'm saying that's semantics

it's not

Auditor can be used to check if something is running GrapheneOS

if it does not say it's GrapheneOS in Auditor, it's not GrapheneOS

a fork / derivative of GrapheneOS is not GrapheneOS

And you won't get updates and auditor says it isn't GrapheneOS. Yes. I get that.

this channel is not about forks / derivatives

because it isn't GrapheneOS

if you replace substantial components of the OS that is not GrapheneOS

if you replace the boot partition including the init system and SELinux policies, that really isn't GrapheneOS anymore

it is a fork

and it's off-topic here

Hence why I said it isn't recommended.

it isn't GrapheneOS or GrapheneOS related - it's about forks

forks should have their own channels

Gotcha. So rooting = fork. Therefore, no longer GrapheneOS. Not recommended etc.

making substantial modifications to the OS including replacing the core OS partition, init, SELinux policies, etc.

is making a fork

that is not GrapheneOS anymore

it's simple

the only way that user-accessible root accessible is made available is via `adb root` and `su` in a userdebug build (i.e. a development build for developers)

there is never app-accessible root or root accessible to the high-level OS / application layer

if people are taking GrapheneOS and applying substantial modifications like replacing the boot image with a Magisk boot image then they are not running GrapheneOS

they may be confused and think they're running it, but they're really not

this channel is only about the upstream GrapheneOS project and support is only provided to people using that or working on that

One can think of this as closer to stock

You wouldn’t ask Google for help with using magisk on stock

In the same vein, you shouldn’t ask help with rooting or any such modifications here, since the OS is shipped as a full set of unmodifiable images

But i need root to change the icon shape

<nickcalyx[m] "But i need root to change the ic"> I think Lawnchair allows to change icon shapes for the launcher

I was only kidding, at the reasons people come up with sometimes to justify undermining the security model