The developers of the GrapheneOS project, which is developing a secure open-source firmware based on Android, have announced the readiness of the port for the newly released Android 17 platform. The transfer of the port to the public repository with the source code is currently underway (GrapheneOS developers gained access to the code and Android patches prior to public release, thanks to a partnership with one of the OEM suppliers).
Today, the final release of GrapheneOS based on Android 16 QPR2 is planned, after which an initial version based on Android 17 will be offered tomorrow. The GrapheneOS version based on Android 17 supports all devices for which builds were created on the Android 16 branch, but builds have only been tested so far on Pixel 6a, 7, 7a, 8, 10a, 10, and 10 Pro Fold smartphones.
GrapheneOS develops a branch from the AOSP (Android Open Source Project) codebase, incorporating many experimental technologies related to enhancing application isolation, access management, vulnerability mitigation, and complicating exploit operations. Among other features, the platform employs a custom malloc implementation, a modified version of libc with memory corruption protection, and stricter separation of process address spaces. Additional protection mechanisms have been included in the Linux kernel, such as canary tags in slub to block buffer overflows. SELinux and seccomp-bpf are used to enhance application isolation. Users can selectively restrict applications' access to network operations, sensors, the address book, and peripheral devices (USB, camera).
Source: opennet.ru
