GrapheneOS
- Toronto, Ontario, Canada
- https://grapheneos.org/
- contact@grapheneos.org
Grow your team on GitHub
GitHub is home to over 50 million developers working together. Join them to grow your own development teams, manage permissions, and collaborate on projects.
Sign up
Pinned repositories
Repositories
-
Auditor
Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.
-
-
script
Scripting for generating signed production releases of AOSP and metadata for the Updater app along with partially automated maintenance of out-of-tree patch sets.
-
-
hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
-
kernel_google_sunfish_techpack_audio
Pixel 4a audio driver sources.
-
-
-
-
AttestationServer
Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.
-
platform_manifest
Repo manifest for the GrapheneOS mobile privacy and security hardening project.
-
device_google_sunfish-sepolicy
Pixel 4a SELinux policy extensions.
-
device_google_crosshatch-sepolicy
Pixel 3 and Pixel 3 XL device SELinux policy extensions.
-
device_google_coral-sepolicy
Pixel 4 and Pixel 4 XL SELinux policy extensions.
-
device_google_bonito-sepolicy
Pixel 3a and Pixel 3a XL SELinux policy extensions.
-
platform_external_vanadium
Vanadium integration for GrapheneOS. See https://github.com/GrapheneOS/Vanadium for the Vanadium build configuration and patches.
-
Vanadium
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
-
-
vendor_linaro
Minimal vendor files for testing on HiKey and HiKey 960. Not suitable for production usage.
-
platform_packages_apps_Updater
Automatic background updater for Android. Primarily intended for use with A/B updates but has a fallback path for the legacy recovery system too. See https://github.com/GrapheneOS/script/blob/11/generate_metadata.py for the server metadata generation tool.
-
platform_external_PdfViewer
PdfViewer app prebuilt using the latest official release of the PdfViewer app.
-
platform_external_chromium-webview
Temporary stock WebView integration until Vanadium has WebView support for Android 11. The plan is to replace this with the release of Chromium 86 in the coming weeks.
-
platform_external_Auditor
Auditor app prebuilt using the latest official release of the Auditor app.
-
-
branding
Stub repository for future branding of the OS including wallpapers, boot animations, etc.