The AndroidHardening project has been renamed to GrapheneOS to reflect significant progress towards it becoming a broader and more sustainable project: github.com/GrapheneOS. It will be expanding into a broader and more sustainable project with more developers on board soon.
Conversation
In addition to the focus on developing privacy and security improvements for the Android Open Source Project, it will include more standalone sub-projects hardened malloc implementation that are portable to other OSes. The Auditor app and attestation service are another example.
1
2
3
Standalone projects will be MIT licensed like the hardened malloc implementation: github.com/GrapheneOS/har. Attestation work will be made MIT licensed soon. Changes to existing projects will use the upstream licenses, which is already the case for the Android changes (Apache 2).
1
1
3
It's being supported by some companies, but there will be a strong focus on preserving independence and distance from corporations, governments, etc. Lots of care will be taken to avoid dependence / coercion. There's already much more diverse sources of support and collaboration.
2
3
Once the project has expanded, it can gain official support for more devices, but it will be possible to easily build it for many devices due to Treble even without official support. Supporting QubesOS as a first-class target with proper integration is also still on the roadmap.
2
4
This Tweet was deleted by the Tweet author. Learn more
Replying to
It's available for free as both permissively licensed sources and official builds of the code pushed out via the official update server. There are very early sample releases at seamlessupdate.app. The last releases were made early this month and are missing lots of progress.
Replying to
There can eventually be devices sold with it installed along with companies supporting the project making their own downstream variants and products, or incorporating portions of the hardening work. It won't be focused around building and selling products as a project though.