diff --git a/content/os/Choosing Your Android-Based Operating System.md b/content/os/Choosing Your Android-Based Operating System.md index 9807f00..6834728 100644 --- a/content/os/Choosing Your Android-Based Operating System.md +++ b/content/os/Choosing Your Android-Based Operating System.md @@ -62,6 +62,8 @@ End users should be using the production `user` builds, and any distributions th Unfortunately, many custom Android-based operating system builds (especially unofficial LineageOS builds) disables SELinux or set it into permissive mode. You can check whether SELinux is in enforcing mode or not by executing `getenforce` in the ADB shell (the expected output is `Enforcing`). You should avoid any Android-based operating system builds that do not have SELinux in enforcing mode at all cost. +![ADB SELinux](/adb-selinux.png) + ## Good Android-Based Operating Systems Currently, I am only aware of two Android-based operating systems that should be used over the stock operating systems: @@ -75,6 +77,8 @@ For usability purposes, GrapheneOS supports [Sandboxed Google Play](https://grap Recently, GrapheneOS has also added the [Storage Scopes](https://grapheneos.org/usage#storage-access) feature, allowing you to limit what legacy apps which still use the old storage API can access. With this new feature, you no longer have to grant certain apps access to all of your media or files to use them anymore. +![VLC Storage Scopes](/vlc-storage-scopes.png) + Currently, Google Pixel phones are the only devices that meet GrapheneOS's [hardware security requirements](https://grapheneos.org/faq#device-support). ### DivestOS diff --git a/static/adb-selinux.png b/static/adb-selinux.png new file mode 100644 index 0000000..937667c Binary files /dev/null and b/static/adb-selinux.png differ diff --git a/static/vlc-storage-scopes.png b/static/vlc-storage-scopes.png new file mode 100644 index 0000000..8c0f1d5 Binary files /dev/null and b/static/vlc-storage-scopes.png differ