[delayed]
It's rather awkward to me because it runs almost entirely through userspace or eBPF. Both of which are trivial to spoof and bypass. You can create a fake efivarfs, fake integrity states, etc, and if they actually try to…
Same thing can be said for LineageOS too.
Indeed, LineageOS doesn't officially support rooting *at all* anymore. They also ban Magisk from their communities IIRC.
You're losing a lot more than that: - secure app spawning (huge because without it, many hardening improvements are useless) - extremely secure memory allocator - fully enabled MTE on shiba and newer - relockable…
[delayed]
It's rather awkward to me because it runs almost entirely through userspace or eBPF. Both of which are trivial to spoof and bypass. You can create a fake efivarfs, fake integrity states, etc, and if they actually try to…
[delayed]
Same thing can be said for LineageOS too.
Indeed, LineageOS doesn't officially support rooting *at all* anymore. They also ban Magisk from their communities IIRC.
You're losing a lot more than that: - secure app spawning (huge because without it, many hardening improvements are useless) - extremely secure memory allocator - fully enabled MTE on shiba and newer - relockable…
[delayed]