DivestOS is a vastly diverged unofficial soft fork of LineageOS.
All supported devices receive monthly security updates. Select devices support incremental updates for smaller update downloads. DivestOS however cannot and does not include all ASB patches as detailed here.
Automated Kernel CVE Patching¶
We've developed an automated patch checker along with an extensive database of fixes for over 3,150 Linux kernel security issues. These are automatically applied where possible to all devices.
Bootloader relocking is restored and has been tested working on 23 devices and is available for 26 more. Verified boot is also restored on 36 of those devices and is enforcing once locked.
Powerful Tracker Blocker¶
A custom wildcard-optimized hosts file created by analyzing over 180 million domains is included that blocks over 900,000 advertising and tracking servers.
Privacy Oriented Browser¶
Mull is a browser based on Mozilla technology that is hardened against fingerprinting techniques thanks to the Tor uplift project and arkenfox-user.js project.
DivestOS ensures to uphold the four freedoms of free software through and through. We also encourage and help other projects in this space to re-use our work.
Over 700 proprietary blobs are removed during build time. Removal of these proprietary blobs increase security by reducing attack surface and increase privacy by removing untrusted code.
Free Space Eraser¶
Extirpater is the first free space eraser for Android. It helps prevent deleted files from being recovered. Perfect for migrating from an unencrypted install or before selling your device.