GrapheneOS version 2026071100 released

occtec

xxx

xxx
Will wait for beta this time on the P9. ;-)

xxx

xxx Will wait for beta this time on the P9. ;-)

It is in beta now.

GrapheneOS-Jub

I could no longer open 1 of my banking apps. It used to work flawlessly the day before the 2026071101 update. The bank app itself has its last update last month. It says the app cannot run on a jail break/rooted phone. Other installed banking apps are working okay.

Johnnyloans

GrapheneOS-Jub

Under app info for that app, would turning off secure app spawning help? I think there's a new toggle.

GrapheneOS-Jub

Johnnyloans Thanks. Yes Secure App Spawning is disabled. I searched all related topics " banking apps" in forum and applied as adviced. Likewise Metroplex other advices before finally enabling last option Exploit Compatibility mode.
Actually Exploit Compat mode was already enabled before and all are working fine. Meantime App Info settings are: Exploit Compat - Enabled, Hardened Malloc - Disabled, Memory Tagging - Disabled, Secure App Spawning - Disabled, Native Code debug - Allowed, Webview JIT - Default (enabled), Dynamic Code Loading - Allowed via memory and via storage are - Allowed.
Banking app was downloaded via Aurora store and has been working since Feb (having received last bank app update 24 June) .
Also tried clearing cache.

n2gwtl

GrapheneOS

With this improvement, it should be doable to enable profiles in Vanadium. (I think you have been working on this) it would be nice to have each webapp in its own profile.

GrapheneOS

GrapheneOS-Jub Try with it installed via the sandboxed Play Store instead.

GrapheneOS-Jub

GrapheneOS Thanks. My final option that would be. Will wait for the Stable release first. Wondering was there something on the update that caused the app to alert i am on a jailbreak/rooted phone and asking me to factory reset or use another device instead?

user

GrapheneOS-Jub

Nothing will change if it reaches stable, the release is the same you have installed.

GrapheneOS-Jub

Working intermittently/erratic behaviour. i. e sometimes OK at times Not OK.
Disabled Exploit Compat, Enabled Hardened Malloc, Disabled Memory Tagging, Disabled Secure App Spawning.
Forced Stop/Clear Cache/Reboot - works OK.
But when i exit the app and reopen it, app won't run.
Perhaps the bank app was affected by the new implementation of the Secure App Spawning?

Kamika242

GrapheneOS-Jub Perhaps the bank app was affected by the new implementation of the Secure App Spawning?

Or maybe the play-integrity test? Do you have corresponding notifications from the system that the app used play-integrity? I had an drugstore app working over several new versions of GrapheneOS after login in the beginning, one day I did a logout while trying something with profiles and now I can't login anymore, because of play-integrity.

GrapheneOS-Jub

Kamika242 Thanks. I'm a stranger to the Play Integrity test and no playstore installed, only play services.
I got it running now most of the time but when i exit to another profile and comes back to the bank profile at times it runs ok but sometimes it shows system error about hardened malloc. To be able to run the bank app again, i have to force stop / clear cache to run/open the app again.
Erratic behaviour in a way that one cannot predict when the problem will occur.

Novaliss

GrapheneOS-Jub no playstore installed, only play services.

I'm on Team install Both, keep disabled if not in use. These are supposed to exist together.

n2gwtl

How does this update relate to "exploit compatibilty mode?" The toggle was used to address some apps that crashed due to the GoS hardening. Does the new execve implementation address that issue?

GrapheneOS

n2gwtl It makes it possible to toggle off secure (exec-based) spawning for individual apps since there will still be extremely rare cases of apps incompatible with it. We fixed most of the compatibility issues with it in this release. There was previously a global toggle for disabling it but the toggle for disabling allocator hardening had to force enable exec-based spawning which isn't the case anymore. It now works fine with the other per-app compatibility toggles and has one itself. It falls under the overall exploit protection compatibility mode switch provided for ease of use.

MrLinux

P9a updated everything is working good so far no issues.

GrapheneOS-Jub

Novaliss Thanks. I stsnd corrected on my last post. Both Play Store and Play Services are installed but only Play services is enabled while Playstore is disabled and with no permissions.
I would understand then that should i choose as my last option to enable GPS, i would uninstall the Aurora-installed App and download the same app thru GPS for the play integriity to work?
Meantime for sharing info, i again opened the bank app this morning and coming from a diffrent profile it showed the same error " hardened_malloc detected an error in bank app name". This time self just ignored the error and reopen the app. And it magically worked! I tried 3x but could not replicate the malloc alert. Will try later after some time as am afraid i might be locked out of the bank app after numerous logins.

Novaliss

GrapheneOS-Jub uninstall the Aurora-installed App and download the same app thru GPS for the play integriity to work?

You should first try searching for the installed app in Sandboxed Google Play Store, this sometimes brings up the app with the offer to let Play 'take custody' over that app and update it from this on.

GrapheneOS-Jub

Novaliss Thanks very much! I will do that. Really appreciate your hard work guys!

« Previous Page Next Page »