sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
28 lines
1.3 KiB
Markdown
28 lines
1.3 KiB
Markdown
# LAB acceptance — 20261002T162840Z (US-S5-1 Yama + SLAB_FREELIST_RANDOM)
|
|
|
|
Device: `11231JEC207477`
|
|
Artifact: `20261002T162840Z-axp-stage1-combo4-cve-hi-releasekeys`
|
|
Ship: `AXP-Resurection-Pro-23.2-20261002-sunfish.zip`
|
|
|
|
Sideload Pro zip + reinforce Magisk `boot`/`dtbo`/`vbmeta`/`vbmeta_system` on
|
|
active slot `_b` (2026-10-02 evening).
|
|
|
|
| Gate | Status | Notes |
|
|
|------|--------|-------|
|
|
| A Boot/HW | pass | `sys.boot_completed=1`, slot `_b` |
|
|
| B Google stack | pass (prior) | microG/Phonesky unchanged this bacon |
|
|
| C Toggles | pass (prior) | Not regressed |
|
|
| D Magisk | pass | `magiskd` present; TF Magisk boot reinforced |
|
|
| E Banking | deferred | PIF/Vector BL spoof — owner config, not this pack |
|
|
| F Usability | pass (prior) | |
|
|
| G Hardening | pass (this pack) | US-S5-1: `CONFIG_SECURITY_YAMA=y`, `CONFIG_SLAB_FREELIST_RANDOM=y`, LSM lists `yama`; US-S4-1 OpenSSH still absent; `init.openssh.rc` present |
|
|
|
|
Props:
|
|
- `ro.lineage.version=23.2-20261002-UNOFFICIAL-AXP-Resurection-Pro-sunfish`
|
|
- `ro.axp.resurection.track=pro`
|
|
- `ro.boot.flash.locked=0`, `verifiedbootstate=orange`
|
|
- `/proc/config.gz`: YAMA + SLAB_FREELIST_RANDOM + `LSM=…,yama,…`
|
|
|
|
Recover baseline: `20261002T085915Z-axp-stage1-combo4-cve-hi-releasekeys` (README).
|
|
Prior US-S4 LAB: `docs/009-lab-acceptance-20261002-uss4.md` (`151944Z`).
|