DivestOS is a vastly diverged unofficial soft fork of LineageOS.
All supported devices receive monthly security updates. Select devices support incremental updates for smaller update downloads. DivestOS however cannot and does not include all ASB patches as detailed here.
Automated Kernel CVE Patching¶
Bootloader relocking is restored and has been tested working on 23 devices and is available for 26 more. Verified boot is also restored on 36 of those devices and is enforcing once locked.
The Mulch hardened Chromium WebView is included with features like control-flow integrity and network state partitioning enabled. Furthermore Mulch is updated independently of the system image via an F-Droid repository for rapid security updates. Mulch is directly made possible thanks to the Vanadium project.
Powerful Tracker Blocker¶
DivestOS ensures to uphold the four freedoms of free software through and through. We also encourage and help other projects in this space to re-use our work.
Over 700 proprietary blobs are removed during build time. Removal of these proprietary blobs increase security by reducing attack surface and increase privacy by removing untrusted code.
Free Space Eraser¶
Extirpater is the first free space eraser for Android. It helps prevent deleted files from being recovered. Perfect for migrating from an unencrypted install or before selling your device.