Duress password in another ROMs

UNCOGN

Hi, i wanted to know how can I include this feature in another roms, like LineageOS.
I use a GrapheneOS GSI in my device because it aren't suported by grapheneOS, but some apps are buggy, so i wanted to install lineageOS but i really like this feature, so i wanted to include it in the rom.
There is a repo that i can include in my source? or something like that?

Developer-Dude

UNCOGN I use a GrapheneOS GSI in my device because it aren't suported by grapheneOS

Assuming you are running RestlessOS you should hopefully be aware that this is nowhere near as secure as actual GrapheneOS. RestlessOS is not GrapheneOS. Since its a GSI ROM, I believe you must keep your bootloader unlocked, which is highly insecure. Just want to make sure you are aware of this. Now to answer your question...

UNCOGN There is a repo that i can include in my source? or something like that?

No. You can't just include a GrapheneOS repo or anything in your source build. The Duress PIN is deeply integrated into the Android system by GrapheneOS. Its not just a plug and play feature with other OSes. Integrating it would require extensive Android building knowledge, and you'd likely have to build and provide your own security updates. This isn't practical or easy to do.

Once again if you want a real secure device, I strongly recommend using real GrapheneOS, Because RestlessOS isn't GrapheneOS, and LineageOS also isn't as secure as an OS.

Note I don't speak for GrapheneOS

UNCOGN

Thanks for clarifying, but I would really like to implement this, and I’m willing to give it a try, even if it’s difficult.
I do have some knowledge of Android building, though not a vast amount; I can handle the basics:
compiling ROMs, fixing simple errors, implementing features, etc.

I believe I can pull this off, even if it takes days, weeks, or even months.

Developer-Dude

UNCOGN I’m willing to give it a try, even if it’s difficult.
I do have some knowledge of Android building, though not a vast amount; I can handle the basics:
compiling ROMs, fixing simple errors, implementing features, etc.

AFAIK, you will need to know a LOT more than that. Its not just implementing features or compiling code. The Duress PIN must be deeply integrated with the bootloader, lock screen, PIN screens, and in the system. You would have to modify the kernel, and boot firmware, likely even modify the keystore encryption system to be able to wipe the encryption keys. The amount of time, effort, and money invested into this, you are better off buying a Pixel phone and installing GrapheneOS, which is actually secure. LineageOS isn't near as secure as GrapheneOS and even adding a Duress PIN won't help security

Novaliss

Developer-Dude running RestlessOS

Just look at their list of differences from real GrapheneOS:
https://github.com/cawilliamson/treble_restlessos#changes-from-grapheneos

🫨🙄🤣

Novaliss

No hardened malloc
No USB-C hardening
No timely updates
and get this; No secure spawning since this would break rooting/Magisk 😳

legreteco

Novaliss I think it's a good compromise for people who aren't able to get a pixel phone. Maybe they can't get it in their region or they don't have the money to buy a pixel now, but still want more privacy?

Novaliss

legreteco But the risk is high for them overestimating the security and privacy gains if any at all by doing this.

Novaliss

legreteco they get hardly anything at all from GrapheneOS, not even a proper OS, just a GSI

ClickClickDrone

legreteco I think it's a good compromise for people who aren't able to get a pixel phone.

Stop with your bollocks.
It is not a good compromise at all, and by using that system, you lose in all departments as it is running as a GSI with no kernel, firmware, or driver updates at all, while also having to use an unlocked bootloader.

GSIs are not meant for daily usage -- they should only be used for development and testing.

This is not just a security nightmare, but also a privacy disaster since there is no security enforcing the privacy needed.

Please see a related response from GrapheneOS regarding GSIs if you don't believe me.

legreteco

ClickClickDrone Novaliss so you are saying you would rather use a stock android phone with google services etc. than a GOS GSI?

ClickClickDrone

legreteco
Yes.
I'd much rather that since that provides adequate security, and if configured correctly, privacy as well.

Novaliss

legreteco yes

Novaliss

legreteco Without a shadow of a doubt yes. And I used DivestOS in the past, but that project was a bit more serious than Treble Restless, not a GSI and they at least tried keeping up with timely updates. But they also opened up for intrinsically unsafe, outdated devices. Yes, I get the idea of offering a new chance for old devices rather than just discarding them, but in reality it just doesn't work that way I'm sorry.

userofgos

legreteco not even close to being a compared to full GrapheneOS see here: https://discuss.grapheneos.org/d/36112-til-of-restlessos-fork-of-grapheneos/12

legreteco

userofgos of course not and this is not my point

Novaliss

It gives a bit of: https://en.wikipedia.org/wiki/Copy-and-paste_programming

unsaltedsanctionsnowdrop

UNCOGN how can I include this feature in another roms, like LineageOS.

As is always the case in engineering, if you have to ask someone else "how can I implement x feature?" Then you probably don't know enough about the topic to do it. You may need to ask some questions, but just asking someone else to lay out for you the steps from the beginning means you won't be able to implement it in a way that's actually secure or efficient.