[NEW ROM][UB] February 9: Jaguar Leo LP 5.1.1 Official Hardened - Xperia Z3 Original Android Development

This is the Official Jaguar rom for Leo, which is based on AOSP with some flavors from Slim and Dirtyunicorn plus a bunch of features only this rom has, such as a working camera button. . The rom was originally made for Xperia Z1 Honami in August 2015, then extended to Z1c and now to Z2/Z3/Z3c. The rom has been downloaded thousands times and enjoyed great success. I hope the trend will continue with Jaguar for Leo.
Why LP, as opposed to MM and Nougat? Several reasons. The main one is Sony's unfriendliness to development community. Camera sucks, because Sony wouldn't provide proper blobs. Also, MM brings very few features, as opposed to LP. MM is still in alpha, but is already being abandoned by developers in favor of Nougat. Nougat will never work for Z1/Z2/Z3, because Sony wants you to buy a newer device. And finally, all LP roms, except Jaguar, have been abandoned by their developers since November 2015. CM still publishes nightly LP, but they have abandoned CM 12.1 kernel, meaning, they haven't incorporated about 800 security patches from Google and Code Aurora in LP kernel. Another reason - I take changes from Android Gerrit Master Branch, Code Aurora, Google Security Bulletins and 3.10, 3.18 and 4.x kernels. Enough reasons for you?
The main difference from other roms is the emphasis on security and multiple features. With that in mind , let's see what Jaguar has to offer:
1. Hardened Kernel, modified M5; hardened rom built with HYPERTOOL 5.4
2. All ciphers enabled in kernel instead of just a few
3. Hardened/Fortified Bionic and Libs
4. Fstack protection strong to resist buffer overflows
5. Many System apps and processes are made read-only, to reduce elevation of privilege
6. Selinux replaced with Tomoyo Security, Yam security
7. Disc encryption, keymaster to 256 bit AES instead of 128
8. Latest TWRP with working brightness and ability to decrypt Data (Coming Soon)
9. Random number generation mixed hardware/software, as recommended by Linus Torwalds
10. Options to randomize host on every boot
11. Option to have a separate password for lock screen and boot
12. Qualcomm's Time Services disabled due to leaking on early boot (set time to automatic to get it from your carrier)
13. WIFI Background Scanning disabled to prevent leaking
14. Internet disabled for both WIFI and Data until Afwall is set and activiated (Afwall included in download, install as regular app)
15. The phone is VOLTE ready and you have all network options available in Cell menu (not just LTE/WCDMA/GSM)
16. GRsecurity features, such as Sidechannel implemented
17. Some Pax Security Features
18. Option to deny USB connection: denied always; denied when locked; and allowed always
19. Hardened webview with Google and other "interesting" IPs removed
20. Prevention of bruteforcing screen pin: the phone will reboot upon 3 unsuccessful attempts
21. Perfect_Event_Paranoid ported from Grsecurity: now third party apps can't use other apps including system to elevate privileges
22. Camera hardware button works to focus, take pictures and start video recording
23. Option to disable writing to Tombstones (a lot of private info is dumped there if there is a crash)
24. Option to disable continuing writing of logcat
25. Option to disable device cameras: back; front, both or none
26. Option to disable third party apps to access clipboard
27. Always latest Google Security Patches
28. Always latest Code Aurora Security Patches
29. Changes ported directly from Google Android Gerrit, so most of those in MM and even N are in this rom
30. About 80% of kernel changes are ported into Jaguar kernel from 3.10 and 3.18 (not Sony AOSP 3.10 that has Down Syndrome, but Linux/Google/Code Aurora one)
31. Rom is odexed to significantly increase boot speed (under 30 seconds) and application start
32. Many more security features ported from Linux and Copperhead OS
33. Dns Crypt: a feature allowing to choose among many Dns providers (all encrypted)
34. Seccomp: secure computing enabled in kernel
Other features include: Layers Theme Engine; Native Call Recording with interface integrated in Dialer with no restrictions; Privacy Guard; Native Wakelock Blocker; Native Black List; Global Menu; Slim Recents; Traffic Indicators; Advanced Reboot; Slim Pie; CPU Info on Screen; Ram Bar in Recents; Open Source Supeuser included and integrated in Settings; True Offline Charging with Screen Off; Kernel Adiutor included (unzip and install as a normal app) and integrated in Settings plus more
Things users need to know to have smooth experience:. These are not bugs, but rather an explanation of some features
1. If you want to do data encryption, keep in mind that unlike Android, Jaguar uses 256 bit encryption. If you were encrypted on other roms, you won't be able to decrypt. So, wipe encryption and then re-encrypt on Jaguar. Also, keep in mind that if you ever did factory reset on official TWRP 3+ for honami, your data partition is screwed and have to be resized to enable encryption. This has nothing to do with the rom, but rather with the official TWRP itself. Fastboot my unofficial TWRP 3.0.2, (it is coming for Xperia Z3c, which, by the way has working brightness, as well as ability to decrypt and mount data
2. Jaguar contains a script running on early boot, which cuts the internet access to both WIFI and Data until Afwall is running. This is done to prevent leaking, as well as having all your internet traffic routed through some interesting number of servers, including this IP: 26.147.196.22. So, install Afwall and activate it, otherwise, no Internet for you
3. If your system language is different from English and you want to make changes in Phone/Cell Network settings, switch to English first, make the changes and then return to your language. The changes you made will hold. If you try to make the changes in your language, you will have com.android.phone crash. Localization takes time and is virtually impossible to implement in Jaguar, which is a one-person-rom
4. Sony TimeKeep, which is ported from MM/N, now sets the correct time on reboot without the Internet or GSM signal. All you need to do is set it once and TimeKeep will save/recalculate/restore the same on each reboot
5. GAPPS: if you use them, you need to flash them right after the rom (or each update) and before reboot. Flashing after reboot will result in multiple f/c
6. Due to Volte implementation, you might be required to flash LP or MM stock baseband (only if you have no 2g/3g signal)
7. Helpful fastboot commands: for flashing TWRP: fastboot flash recovery recovery.img
for flashing kernel: fastboot flash boot boot.img
Download: All updates and change logs are in Post #3
Instructions:
1. Be on LP at least, have TWRP, unlocked bootloader and root
2. In TWRP, wipe data/factory reset, then wipe System/Data/Cache/Dalvik
3. Flash the rom
4. Reboot, install Afwall and Kernel Adiutor as normal apps; activate Afwall to have Internet
5. Enjoy the rom, say thank you, donate or do both
Warning: If your device and/or anyone in the immediate vicinity dies, don't blame me: it is all China and Russia's fault.
Credit: CM, AOSP, Slimroms, DU, Copperhead OS, Myself5 (kernel)
UPDATED KERNEL SOURCE: https://forum.xda-developers.com/devdb/project/dl/?id=23107 . Don't flash. This is not kernel, but rather sources to compile kernel
Kernel Source: https://github.com/AOSP-Jaguar/kernel_sony_msm8974
XDA:DevDB Information
JAGUAR LEO OFFICIAL HARDENED, ROM for the Sony Xperia Z3
Contributors
optimumpro
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP,CM,SLIM,DU
Version Information
Status: Stable
Stable Release Date: 2016-10-18
Created 2016-10-18
Last Updated 2017-02-09

Development update and some Screenshots
I broke my Z1 screen again and I am not in the mood for after market screens. And I am sick and tired of Sony crappy treatment of development community.
I am now looking at Lenovo Zuk Z2 or Z2 pro. Both excellent phones with the latest CPU and made out of metal and glass by Motorola which they bought from Google a couple of years ago. Zuk is friendly to developers and their blobs don't dumb down camera and they don't seek to "unify" bugs for all their devices. I no longer wish to support a fat bastard corporation that can't make a good phone, but thinks that just by putting their logo on the phone would make it worth $700.
RE Jaguar. I will continue to maintain Jaguar mainly with security patches... for a while, but my main work will be concentrated on Zuk. There is a lot of work to be done cleaning Android N and implementing security and other features from Jaguar...
Screenshots are here: http://forum.xda-developers.com/showpost.php?p=62560391&postcount=2

Download Section
February 9: New release including
1. February security patches
2. Sony TimeKeep to set the correct time on boot
3. Dns_Crypt (numerous choices of encrypted Dns providers) in Settings/Security
4. Open Source Superuser integrated in Settings
5. Seccomp/secure computing implemented and enabled in kernel
6. Twrp that supports data decryption, as well as TimeKeep
To use Dns_Crypt, you must allow Internet for 'apps run as root' in Afwall
Download Rom: https://forum.xda-developers.com/devdb/project/dl/?id=23079
Download TWRP: https://forum.xda-developers.com/devdb/project/dl/?id=23078
__________________________________________________________________
January 29. XDA is having a problem with upload/download. So, here is updated TWRP 3.0.2 that is able to decrypt and mount encrypted data partition. This one is different from the originally posted, because it includes the correct time. Together with the February release (not now), it will set the correct time both in recovery and the rom:
Download: https://www.androidfilehost.com/?fid=745425885120704246 There is a new TWRP on top of this post and in the download section...
January 12: New release This should take care of a color line on Auo displays. Also included is the fully working NFC-HCE for Android Pay (to pass Safety Net, you'll have to delete Supersu and su binary). And January security patches, of course...
Download: https://forum.xda-developers.com/devdb/project/dl/?id=22563
You may flash dirty on top of another Jaguar release. Otherwise - clean install
__________________________________________________________________________________
December 31. TWRP 3.0.2 able to decrypt data. This works well for Xperia Z1 and Z1c, but, since I don't have the device, it may or may not work for Z3. So, test it and report
Unzip the file (attached to this post) and flash in fastboot like this: fastboot flash recovery recovery.img
____________________________________________________________________________________________
December 14. New build with increased brightness levels. Flash only if you have a type of display that has flickering on low brightness. If you have no flickering, no need to upgrade
Download: http://forum.xda-developers.com/devdb/project/dl/?id=22108
______________________________________________________________________________
December 10: Rom updated to include
1. December security patches
2. Signature Spoofing (Omnirom type), switch in Developer settings
3. USSD fixed (maybe)
Download: http://forum.xda-developers.com/devdb/project/dl/?id=22020
__________________________________________________________________________________
November 10: Rom updated to include November Security Patches. I have also removed SuperSU, as there is a built-in root manager and quite a few people no longer like the Chinese owned SuperSU[/COLOR]
Download: http://forum.xda-developers.com/devdb/project/dl/?id=21437
__________________________________________________________________________________
October 18. New release including Code Aurora and Google latest security patches. Also, there is a new feature - option to prevent apps from accessing clipboard in background.
Download Rom: http://forum.xda-developers.com/devdb/project/dl/?id=20976
Download Afwall/KernelAdiutor: http://forum.xda-developers.com/devdb/project/dl/?id=20974

Any support for d6633?

I flash the baseband but after reboot the baseband is unknown again. And the ussd code not working.

leesiangcheng said:
I flash the baseband but after reboot the baseband is unknown again. And the ussd code not working.
Click to expand...
Click to collapse
Flash the correct baseband AFTER flashing the rom. If it says unknown baseband, you won't have even a sim card recognized.
USSD is a known issue. It works, but slowly: I get a response in 2-3 minutes...

Flash baseband alreadyworking .but after reboot the base band is gone.btw the rom is super fast.hope u can fix the baseband and ussd. Thanks for the rom.

leesiangcheng said:
Flash baseband alreadyworking .but after reboot the base band is gone.btw the rom is super fast.hope u can fix the baseband and ussd. Thanks for the rom.
Click to expand...
Click to collapse
You have to flash baseband for your country variant. I am in the US and had euro baseband and it took 10 sec for the phone to find signal. Then I flashed US baseband and and now I get signal right away...

Yes I flash my country baseband. At first it shows the baseband.but after reboot the baseband turn to unknow again.

Thanks for a great aosp rom! I'll try whenever I have time.
What do you mean with "localisation takes time"? Do you mean that gps is slow?
Sent from my D6603 using Tapatalk

blackhawk_LA said:
Thanks for a great aosp rom! I'll try whenever I have time.
What do you mean with "localisation takes time"? Do you mean that gps is slow?
Sent from my D6603 using Tapatalk
Click to expand...
Click to collapse
No, everything is fast here. Localization means translation to foreign languages. If you want to change mobile network settings (2g/3g/Lte), you would have to switch to English, make changes and then return to your language. That's the only area where you need to do that...

Wow looks amazing, but the million $ question is, is fisheye still present? Since camera is pretty useless on aosp with this fisheye since day 1 on z3..
Sent from my D6603 using XDA-Developers mobile app

corpsegrinder62 said:
Wow looks amazing, but the million $ question is, is fisheye still present? Since camera is pretty useless on aosp with this fisheye since day 1 on z3..
Sent from my D6603 using XDA-Developers mobile app
Click to expand...
Click to collapse
I don't know. Z2 users say there is no fish eye, but there is one on Z3 compact...

Thanks ! Amazing work !
Any plans for a dual sim version ? (D6633/D6683)

The ROM is FAAAST. Incredible, it restored my apps with titanium twice as fast as with other ROMs .
I have a little request, and is to have the network speed indicators in the right side, at the left of the WiFi indicator.
Thanks!
Sent from my Xperia Z3 using Tapatalk

This is greatest Z3 endeavor so far focused on security and stability!
We cant blame Sony for lack of official N ROM, however, lack of working MM source, no up to date MM ROM, which on galaxy s5 is something obvious makes me wonder if Sony doesn't make z3 obsolete for purpose.
Thank you for your effort!
Are there any prolonged battery life features?
Could any of users share battery life and image quality info?
To check if there is any camera distortion its enough to shot something like computer screen and see if its rectangle or it is distorted.

Camera fisheye bug is present.
Also, I I'm experiencing some light flickering on the screen at minimum brightness. Is more noticeable on white screens.
Sent from my Xperia Z3 using Tapatalk

This is awesome! I didn't expect a proper ROM for the Z3 anymore; Paranoid Android development seems slow and I'm still on infected's last CM12.1 ROM – so this is exactly what I'm looking for: A ROM with focus on security. I'll try it out as soon as possible.

Do you guys experience overheating? I encrypted my phone and it burns now... Using the same ROM but for Z3C...
Edit:
Is it possible to decrypt my phone ? I can only see the information that my phone is encrypted, can't click on it.

king960 said:
Do you guys experience overheating? I encrypted my phone and it burns now... Using the same ROM but for Z3C...
Edit:
Is it possible to decrypt my phone ? I can only see the information that my phone is encrypted, can't click on it.
Click to expand...
Click to collapse
Your phone is 'burninig', not because of encryption, but because you changed some settings in Kernel Adiutor. If you don't know what you are doing, don't touch anything. Untick all 'apply on boot' and reboot the phone to load default values. Jaguar on Z3c doesn't get over 50 degrees at highest loads (playing graphic intensive games)...

Related

ROM UPDATED May 19, 2015 [ROM] LP 5.1 Resurection-Remix Hardened Unofficial

Rom updated on May 19. This is LP 5.1 release 2. Latest Google/CM/Resurrection sources + all hardened features. Plus cleaned IP addresses (got rid of Google, Level 3 communication, AT&T, Orange, Department of Defense and other shady ips). Also enabled is Volte (enhanced LTE), which is Voice over LTE. This depends on the service provided by your carrier. In the States, for example, T-Mobile provides such services, which include high definition voice. Usually, you need special update done by the manufacturer in conjunction with your carrier. This rom does not need that. Your Z1 is already provisioned for Volte. You will see in Mobile Settings another entry: Enhanced 4g LTE Mode. ALso, in test menu/phone (*#*#4636#*#*), you will see a Volte Provisioned Flag. So, as soon as your carrier starts Volte, you are all set.
Sources are the same...
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=12531
_____________________________________________________________________________________
Rom updated to latest sources on May 4. In addition to regular hardened features, more than 40 instances of Google IP, Level 3 Communication and Department of Defense IPs removed from sources both for IPV4 and IPV6. The same is replaced with Opendns IP. Keep in mind that those ips go not only in configuration files, but libs also and the latter cannot be decompiled and fixed...
Download link: http://forum.xda-developers.com/devdb/project/dl/?id=12289
______________________________________________________________________________________
Rom Updated to LP 5.1.1. All hardened/security features implemented. Kernel used from Slimroms 5.1.
TWRP 2.8.6 is integrated in kernel.
Obviously, this is an alpha version...
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=12110
Kernel Source: https://github.com/AOSP-Argon/kernel_sony_msm8974/tree/lp5.1
___________________________________________________________________________________________________
Rom updated to 5.1: all hardened features enabled.
Download link: http://forum.xda-developers.com/devdb/project/dl/?id=11901
___________________________________________________________________________________________________
March 31: kernel updated to include screen color calibration:
See Download link: http://forum.xda-developers.com/showpost.php?p=59801528&postcount=94
_________________________________________________________________________________________________
March 27: New build is up, latest CM and Resurect changes; kernel includes voltage table, syncookie and TWRP.
Download Link: http://d-h.st/lw2s
Mirror Link: http://forum.xda-developers.com/devdb/project/dl/?id=11744
_________________________________________________________________________________
March 15: New build is up including latest sources, TWRP integrated in kernel, led lights fixed
DOWNLOAD LINK: http://d-h.st/UO7W
_______________________________________________________________________________________________
Marchh 7: Rom Updated to the latest version + plus all security enhancements. Sources for security changes are the same as posted
See Download section for update
Here is Resurection Remixed Lollipop hardened and secure. Built from sources on February 24.
Changes:
First of all, as many know, encryption on lollipop slows down the device to almost unusable. I was able to resolve that. The culprit was Qualcom crypto module and drivers that collide with graphics. In this rom, when you encrypt your device, there is no noticeable slow down at all. Your master encryption key is no longer stored in crypto module (which rumor has it is backdoored anyway), but rather hashed and salted on the drive itself.
1. Modified kernel to disable creepy SElinux and enable Tomoyo security. Now you can safely use Xposed framework and some modules such as Xprivacy, Appsettings and ShowDialpad, as well as many others
2. Modified kernel to disable qualcom module and drivers
3. Disabled creepy qualcom random number generation and enabled all other methods
4. Enabled 256 bit AES drive encryption as opposed to Google's default 128 bit
5. Enabled all ciphers and hashes available in kernel and disabled by default (thanks Sony and Google)
6. Latest CM changes
7. Omniswitch (to be flashed separately after flashing the rom)
Maybe more
INSTALL:
1. Be on Kitkat, rooted with CWM or TWRP
2. Enter Recovery, wipe System, Data, Cache
3. Flash the rom
4. Flash Omniswitch
5. Reboot and enjoy
If you want to encrypt your device, you need to do 2 additional steps before or after encryption. Go to Developer Options and enable "Force GPU rendering" and "Disable HW overlays. Yes, you have to enable (not disable) "Disable HW overlays" option. The latter won't stick after reboot. So, manually transfer the attached init.d script to /system/etc/init.d and set permissions to at least 744. This way the option will be set at boot and you won't have any noticeable slowdown. In fact, I don't see any difference in speed between encrypted and non encrypted device.
CREDIT: Resurection-Remix Team, Cyanogenmod, AOSP and Omniroms
WARNING:
I am not responsible if your device explodes and kills everyone around. You are doing it on your own. Russians, who are definitely coming, won't help you either :laugh:
Download links
Rom: http://d-h.st/l1rB For Update see Download Section
Omniswitch: http://d-h.st/AbGH
Init.d script (in case you want to encrypt your data): http://d-h.st/QIiE
Sources: https://github.com/ResurrectionRemix
https://github.com/HonamiZ1/android_system_vold
https://github.com/HonamiZ1/kernel_sony_msm8974
XDA:DevDB Information
Resurection-Remixed Lollipop 5.1.1 Hardened, ROM for the Sony Xperia Z1
Contributors
optimumpro
ROM OS Version: Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP, Cyanogenmod
Version Information
Status: Testing
Created 2015-02-25
Last Updated 2015-05-19
screenshots
Screenshots added
Kernel updated with CPU voltage table
Kernel updated to allow under/over volting. See attachment.
Instructions:
1. Unzip the file
2. Flash in fastboot: fastboot flash boot boot.img and fastboot reboot
Enjoy
Thanks for this ROM, are there any known bugs?
wis3m0nkey said:
Thanks for this ROM, are there any known bugs?
Click to expand...
Click to collapse
All CM bugs as of February 24. You can go on their site and see the list of changes...
optimumpro said:
All CM bugs as of February 24. You can go on their site and see the list of changes...
Click to expand...
Click to collapse
So just need to look at http://forum.xda-developers.com/xperia-z1/general/rom-official-cyanogenmod-12-nightlies-t3007118 is that right?
Sorry I have to confirm, there are multiple threads (Official/Development) for CM12.
This ROM will maintain root and recovery, right?
I'll flash and let you know if I find any other issues.
Tried it. Works great. Some strange problem with mms though. Could not load them even though data works perfectly. Battery life looks great. Didn't try calling so i can't say anything about the mic.
Kyrius said:
Tried it. Works great. Some strange problem with mms though. Could not load them even though data works perfectly. Battery life looks great. Didn't try calling so i can't say anything about the mic.
Click to expand...
Click to collapse
I use Textsecure as sms replacement. Microphone works great...
Very buggy
you should definately fix this rom as i cannot start camera it fc. it restart itseft
NOT STABLE
darkdevu said:
you should definately fix this rom as i cannot start camera it fc. it restart itseft
NOT STABLE
Click to expand...
Click to collapse
1. Learn the rule about not posting bug reports without logcat
2. Camera works fine: verified
3. Always wipe System/Data/Cache before flashing
4. Are you sure you have Xperia Z1?
Cheers
his profile says Z3. lol
Any further reports on this ROM? Interesting to know how it performs and about stability
Deleted
wis3m0nkey said:
Thanks for this ROM, are there any known bugs?
Click to expand...
Click to collapse
Rom Updated to the latest version. See Download section in the OP.
and where is the link to the update?
shikimafia said:
and where is the link to the update?
Click to expand...
Click to collapse
It is in Download section:
http://forum.xda-developers.com/devdb/project/?id=8412#downloads
Screenshots added in post #2. Note that only this rom and SlimLP work with the latest Xpivacy module. Tried on Crdroid and others and there is bootloop as soon as you enable Xprivacy.
Has no one tried this rom as not reports or posts
tried flashing update from scratch and get play services fc on every gapps i used............i am guessing i may have to flash initial release and dirty flash this over it? excuse me if i may have got it wrong
shingers5 said:
Has no one tried this rom as not reports or posts
Click to expand...
Click to collapse
Well. The first version had 69 downloads. The latest one had 20. Other than the bogus claim about camera foreclosing (by someone who has Xperia Z3) there were no reports of problems. I have been using this rom for about 10 days without any problems...
optimumpro said:
Well. The first version had 69 downloads. The latest one had 20. Other than the bogus claim about camera foreclosing (by someone who has Xperia Z3) there were no reports of problems. I have been using this rom for about 10 days without any problems...
Click to expand...
Click to collapse
I'm having issues flashing the new version as getting play services errors.... Was gonna try dirty flash over previous versions

[ROM UPDATED NOV 11 [UB] DirtyUnicorns Lollipop 5.1.1 r29 Unofficial

If anyone has a problem with Dialer crashing, flash this and reboot: http://forum.xda-developers.com/attachment.php?attachmentid=3542888&d=1447583272
November 11: Rom updated. This is the same release 29 with the following changes:
1. Fixed notifications: now you have the correct icons in status bar
2. Network switches in Settings: mobile, wifi and bluetooth
3. Changes in WP8_supplicant: better wifi
You can flash dirty if you are on the previous release.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=15160
--------------------------------------------------------------------------------------------------------
November 9: Rom updated to release 29
1. Latest Google sources including stagefright and audioflinger patches
2. Updated M5 kernel compiled with GCC 5.2.1 Ubertc - some say no one has done it before
3. Du has abandoned Lollipop (too bad for them), so, this is final unless there are further releases by Google
Kernel does NOT have recovery builtin. So, have TWRP in Fota/Recovery partition
Download: See download link for November 11 above
You may try to do dirty flashing if you were on a previous release, but full wipe is preferable
Oh, I want to give credit (the second time in this thread) for initial kernel sources to @Myself5
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
October 14. New update to LP 5.1.1 r24. This release includes:
1. Blacklist (call blocking). If you go to Security, you will see Blacklist heading where you can add numbers to block
2. Google October Security Patches.
3. Latest Sources (r.24)
This is probably the final Lollipop release, unless Google does r.25 et al. Virtually no one is doing anything with Lollipop: everyone is on Marshmallow... So, enjoy it while it lasts, as we are looking at the next summer the earliest when Marshmallow could become stable...
Download: http://forum.xda-developers.com/devdb/project/dl/?id=14752
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
September 23. Rom updated to LP 5.1.1 r18, DU release 9.7. Latest sources.
Kernel includes the implementation of the latest Linux commit where persistent ram is replaced with Pstore. Also, the latest Sony 14.6 release with a revamped wifi module. The result: more ram available, better wifi and general stability... This kernel is only available on my Jaguar rom (originally) and this version of DU.
Do a fresh install and then you can restore your data (if you were on my prior release), otherwise, fresh install.
Remember, due to DU implementation of Selinux switch (which in my release is redundant (as Selinux is disabled in kernel), the system will take an extra minute (on first boot only) to have access to Settings. Android may complain that Settings app is not responding, choose wait and then allow root access to Settings, so that it could do its thing with Selinux switch. You only have to do it once...
Download link: http://forum.xda-developers.com/devdb/project/dl/?id=14515
____________________________________________________________________________________________________
August 22: Rom updated to LP 5.1.1 r13. Latest sources.
The main change: I have fixed brightness in TWRP 2.8.7. Due to horrendously wrong values, brightness could not be manually adjusted and also exceeded Sony's maximum settings over 18 times, which resulted in temperature rising to over 65 degrees during flashing. So, now the brightness lever works and you have about 52 degrees during backup/restore. I will be pushing commits upstream soon..
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=14132 Download link fixed. There were 4 downloads, please re-download and re- flash.....
You can flash dirty if you are on my previous release.
____________________________________________________________________________________________
August 14: Rom updated to LP 5.1.1 r10 and DU 9.6. Original DU is still release 9, but I used Google's r10 sources.
Latest AOSP/CM/DU sources. Latest M5 kernel with cpu/gpu overclock. TWRP 2.8.7 is in boot image.
You may flash dirty if you were on my previous release. If you use Xposed modules, you must flash Xposed for LP5.1.1 before rebooting.
Otherwise, clean flash. Keep in mind that due to DU changes LockClock app is part of DU Tweaks and if you remove it, you won't have access to Tweaks anymore. The good news is that DU's Lockclock does not have googleplay binaries...
Download: http://forum.xda-developers.com/devdb/project/dl/?id=14022
__________________________________________________________________________________________
August 11: Kernel updated to include the latest CM and M5 commits. Kernel now is 2 mb lighter. Also, the fixed TWRP 2.8.7 is included in boot.img.
Download: http://forum.xda-developers.com/showpost.php?p=62282724&postcount=198
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
August 3: New build. Latest changes. On my end latest M5 kernel with the following additions:
1. CPU frequencies and voltage: 268/300/422/652/729/883/960/1036/1190/1267/1497/1574/1728/1958/2150/2265/2419/2457 and they all show up in voltage
2. GPU two new frequencies: 533/600
I flashed dirty, wiped cache/dalvik and had no problems, but clean flash with the subsequent data restore in TWRP is still preferable.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=13841
P.S. TWRP is in boot, so, get rid of your fota recovery first...
___________________________________________________________________________________________________
July 31: Kernel updated to reflect recent M5 changes. Also, GPU overclock to 600 is added thanks to Androguide.
Download: http://forum.xda-developers.com/showpost.php?p=62126634&postcount=145
____________________________________________________________________________________________________
July 30: New build. This is DU's release 9.5. Latest sources. See changelog in rom.
On my side: Wifi disconnection after 15 min of sleep and excessive draining are fixed. Now, the battery draining is very close to Kitkat
And generally wifi has more power now, as I have increased power cap to 80. All features listed below are also included
On first boot, Settings app is going to hang for about 1 minute due to the fact that SElinux switch is looking for Selinux which is expelled from the rom (as you know), so, just wait for Settings ask for root permission and grant it. If the system says app is not responding, choose wait, because you really want to give Settings that root permission, so that it wouldn't bother you anymore
If you are on a previous DU build, you may flash dirty, but fresh install (and then data restore in TWRP) is preferred.
TWRP is back in boot.img, so, if you have fota recovery, get rid of it in bootloader: fastboot erase recovery
Enjoy
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=13759
_______________________________________________________________________________________
July 19: rom updated. This is 5.1.1 release 8. Latest changes
All hardened features
FM radio included
New M5 kernel with TWRP
Slim Launcher
Here is how to update without losing your data, provided you are upgrading from an earlier DU version:
1. Back up your current DU version
2. Factory Reset
3. Wipe System/Data/Cache
4. Flash the rom
5. Do Xposed Framework if you use it
6. Restore Data partition from your previous DU version
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=13601
_____________________________________________________________________________________________________
July 14. This is an update in SystemUI.apk and Settings.apk. The first one may (or may not) fix the infamous screen freezing issue and incorporates this AOSPA commit: https://github.com/AOSPA-L/android_frameworks_base/commit/0542d859b7678b40c1e39f46a75cd9eb4af68103.
The second in Settings brings Hotspot idle support based on this: https://github.com/DirtyUnicorns/android_packages_apps_Settings/commit/ccabd57818de51196e7cb82eeae266e90029bb08
Just flash the attached dirty and reboot.
Download Link: forum.xda-developers.com/attachment.php?attachmentid=3404076&d=1436880734
________________________________________________________________________________________
New build is available. Latest changes including Selinux switch, Quick settings access to the respective setting.
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=13497
_______________________________________________________________________________________
July 8, new kernel added
Download Link: http://forum.xda-developers.com/showpost.php?p=61766574&postcount=92
________________________________________________________________________________________
July 4, FM Radio added
Download: http://forum.xda-developers.com/showpost.php?p=61699414&postcount=88
Rom updated on June 27. This is LP 5.1.1 release 5. Latest DU and Google sources. All my hardened features included.
Additional changes (by me):
1. Network selection includes all options seen in phone test menu. Now, you can select many combinations of networks in Settings/More/Cellular Networks, as opposed to just 3g/2g/Lte, which means that your selection will stick, unlike when you make changes in test phone menu
2. SlimLauncher instead of Launcher3
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=13325
______________________________________________________________________________________________________
New build is up. I think I was able to address most heat issues. There are also a few changes in DU sources in framework, telephony, vendor and DU tweaks. CPUs are running at about 32 degrees idle and about 42-47 under load. You should also see battery life improvement. There is absolutely no screen flickering (because of no overheating). This is experimental, as I have addressed some MP decision triggers, which in generic CM based kernels result in all 4 CPUs being online all the time. No wonder there was overheating.
I have also found that surprisingly the most lag free action is with Conservative governor. This is counter intuitive, but nonetheless true.. You try it and report
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=13091
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Rom Updated on June 11. This is 5.1.1 release 4. Numerous changes, see DU update info in Settings:
Add USB Tether title
Various ThemeChooser fixes
Add Volume Rocker Swap button function
Add Wakelock Blocker
Add AOKP System /Listview Animations
Task Manager
Show 4G instead of LTE
Make headset notification dismissable
Allow all files over BT
Increasing ring volume
Unlink ringer and notification volumes
ADB over Network tile
Compass tile
PIN keypad shuffler
My own hardened features
Kernel with TWRP 2.8.0; overclocking, voltage, sound and kcal
Fixed Camcoder mike low recording level
Fixed Thermanager to address low charging and flickering
DOWNLOAD: http://forum.xda-developers.com/devdb/project/dl/?id=12979
___________________________________________________________________________________________________
Here is the latest Dirty Unicorns LP 5.1.1 unofficial compiled from sources on May 25. The lightest rom - only 252 mb in zip. All hardened features enabled including:
1. Removed nefarious IPs (Google, AT&T, Department of Defence and others from over 30 files in sources)
2. Hardened kernel features
3. 256 bit data encryption
4. Background WIFI scanning disabled
5. VOLTe (voice over LTE) provisioned
6. Restoring network selection is handled by system, as opposed to modem (the less control to modem, the better)
7. Latest CM and DU sources
Instructions:
1. Unlocked bootloader, root and recovery
2. Enter recovery, wipe /System/Cache/Data
3. Flash the rom and reboot
Download Link: http://forum.xda-developers.com/devdb/project/dl/?id=12638
WARNINGS: I am not responsible for your device turning into a paper weight. You are on XDA, which means if anything goes wrong, blame yourself (and Putin)
Credit: DU Team; Slimroms for kernel and CM
XDA:DevDB Information
Dirty Unicorns Lollipop 5.1.1, ROM for the Sony Xperia Z1
Contributors
optimumpro
Source Code: https://github.com/AOSP-Argon/kernel_sony_msm8974/tree/lp5.1
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP; CyanogenMod
Version Information
Status: Testing
Created 2015-05-26
Last Updated 2015-10-13
New Kernel: Sound, Voltage, Color, Overclock
Here is a new kernel, which is based on CM12.1/M5
New Features:
1. All hardened features included
2. Overclocked to 2457
3. Voltage, Screen Color, Sound
4. TWRP 2.8.0 in boot image
5. Kernel compiled in DU5.1 build environment (with DU ram disk), as opposed to
generic build, which may cause issues because of different init files
Here is my voltage table, which is pretty stable:
300 mhz 730
422 mhz 740
652 mhz 760
729 mhz 770
883 mhz 790
960 mhz 805
1036 mhz 815
1190 mhz 835
1267 mhz 845
1497 mhz 855
1574 mhz 860
1728 mhz 870
1958 mhz 885
2265 mhz 955
2342 mhz 965
2457 mhz 980
Instructions: Unzip boot.img and flash in fastboot:
fastboot flash boot boot.img
fastboot reboot
Credit to MyselfM5 and to anyone who contributed to overclocking/sound/screen color
Source: https://github.com/HonamiZ1/android_kernel_sony_msm8974
soon i test this rom very thanks for the work
I have run this rom for about 24 hours and here are my impressions:
Most stable rom so far and I have tried them all. Also, good on battery. Flickering issue has been definitely fixed (by CM) and I have used their honami device with new values in thermanager. It was not easy to build, but doable, as opposed to Omnirom, which as of now, has no chance for our device. Thanks to DirtyUnicorns, they have a separate calf branch which is suitable for Z1. Don't try to use another kernel with this rom unless you copy modules too. This kernel has screen, sound settings, but no voltage, and I don't recommend tinkering with default values. I have also given up on TWRP 2.8.6, as it has major bugs resulting in overheating and failure to backup/restore. Use any version below.
The rom requires some tinkering: as such, Adaway defaults to disabled on reboot, because of DirtyUnicorn's internal adblock. If like myself, you like Adaway more, then disable adblock in Dirty Tweaks and also delete /system/etc/hosts.alt file. This way, Adaway will work fine.
A separate word on battery. It takes me 3-3.5 hours on OEM charger for a full charge from about 16%. If it takes you more or less, don't blame the rom/kernel, it is your battery dying. Forget about fast charging, it will do nothing good and for sure will destroy the battery. Heat just kills it like nothing else. If the charging is slow, the battery can't get the required voltage and the phone wouldn't report it fully charged. If it is too fast, that means that it attained the required voltage, but holding capacity has been severely reduced, which in turn means, the battery won't hold the load. Trust me, I have recently put a new battery (and new battery door) after using the phone for less than a year. Changing the battery was not a pleasant experience (the sticky they put on glass did not hold, so, I had to use glass glue,.) Why it was a battery? Because, while the phone would say battery heath is good, youtube wouldn't last for more than 20 minutes. Considering that the phone appeared in 2013, that's a miserable battery life, bit it was my fault: too much flashing and heat.
Screen freezes?
Any screen freezes on this ROM? Stayed away from AOSP cause my panel has issues with it. Would be nice to have a ROM which doesn't freeze
Wow, I've been waiting for this!
The only thing that's bothering me now is the lack of advance WiFi and Bluetooth option in the tiles (no arrow below WiFi and Bluetooth icon).
What things do or do not work? I honestly want to flash this so bad, but I'm afraid I might want to go back to my previous ROM when I find out my camera/shutter key doesn't work :/
I'm running a debloated version of the stock ROM, and I'm looking into this for an even lighter experience.
Thanks!
Quick question regarding C6902...would it be required to flash the modem separately like before on kitkat? Or has that been integrated into the rom?
Thanks.for understanding
kpbotbot said:
What things do or do not work? I honestly want to flash this so bad, but I'm afraid I might want to go back to my previous ROM when I find out my camera/shutter key doesn't work :/
I'm running a debloated version of the stock ROM, and I'm looking into this for an even lighter experience.
Thanks!
Click to expand...
Click to collapse
Camera shutter button will never work on AOSP. Just saying.
LOL. I just checked the camera hardware button and it works...
optimumpro said:
LOL. I just checked the camera hardware button and it works...
Click to expand...
Click to collapse
The launch from sleep?
AnrgKrshn said:
The launch from sleep?
Click to expand...
Click to collapse
Not the launch, but shutter...
optimumpro said:
Not the launch, but shutter...
Click to expand...
Click to collapse
I thought he meant the launch
Camera Mike Low Level Fix
This takes care of low level camera sound recording:
http://forum.xda-developers.com/xperia-z1/themes-apps/camera-low-recording-sound-permanent-fix-t3121958/post61044646#post61044646
Enjoy...
I had this bug in all 5.1 ROMs where the camera preview would work fine in low light but after pressing shutter, the photo would come out dark.
Is it still here in this ROM?
Hi, have some problems installing. When I install it seems to remove recovery and I think the efs as well since the network doesn't work at all. I've flashed it three times, each time losing recovery and having to flash the stock rom back. Thanka for your help
Reserved
bigmeech084 said:
Hi, have some problems installing. When I install it seems to remove recovery and I think the efs as well since the network doesn't work at all. I've flashed it three times, each time losing recovery and having to flash the stock rom back. Thanka for your help
Click to expand...
Click to collapse
Just do a search for Xperia Z1 recovery fota solution or fastboot any kernel with good recovery.
I don't know what efs is, but I have absolutely no network/wifi problems: works straight on boot. If you have C6902, you need to flash a file that is posted in general section.
Kernel with TWRP integrated
http://forum.xda-developers.com/showpost.php?p=60569243&postcount=136
Here is a 5.1 kernel with TWRP integrated.
Unzip it and flash in fastboot: fastboot flash boot boot.img
Remember, if you have TWRP in FOTA, don't flash this one, because you wouldn't be able to get to recovery at all.
optimumpro said:
Just do a search for Xperia Z1 recovery fota solution or fastboot any kernel with good recovery.
I don't know what efs is, but I have absolutely no network/wifi problems: works straight on boot. If you have C6902, you need to flash a file that is posted in general section.
Click to expand...
Click to collapse
Thank you. It's c6902, Could you direct me to the file Im meant to flash? Maybe efs is the wrong term, but no network and when I dial *#06# to check imei, it doesn't send a code back and doesn't seem to recognize a Sim, reflashed to stock and got network back

[Rom] Updated February 9: AOSP Jaguar Honami OFFICIAL-HYPERTOOL 5.4

This is the Official Jaguar rom for Honami, which is based on AOSP with some flavors from Slim and Dirtyunicorn. The main difference from other roms is the emphasis on security and multiple features. With that in mind , let's see what Jaguar has to offer:
1. Hardened Kernel, modified M5 built with UBERTC 6.0; hardened rom built with HYPERTOOL 5.4
2. CPU overclocked to 2572 and GPU to 600
3. All ciphers enabled in kernel instead of just a few
4. Hardened/Fortified Bionic and Libs
5. Fstack protection strong to resist buffer overflows
6. Many System apps and processes are made read-only, to reduce elevation of privilege
7. Selinux replaced with Tomoyo and Yam security
8. Disc encryption, keymaster to 256 bit AES instead of 128
9. Latest TWRP with working brightness and ability to decrypt Data
10. Random number generation mixed hardware/software, as recommended by Linus Torwalds
11. Options to randomize host on every boot
12. Option to have a separate password for lock screen and boot
13. Qualcomm's Time Services disabled due to leaking on early boot. Instead, Timekeep is ported from Nougat (time set locally without Internet or GSM signal)
14. WIFI Background Scanning disabled to prevent leaking
15. Internet disabled for both WIFI and Data until Afwall is set and activiated (Afwall included in download, install as regular app)
16. The phone is VOLTE ready and you have all network options available in Cell menu (not just LTE/WCDMA/GSM)
17. GRsecurity features, such as Sidechannel implemented
18. Some Pax Security Features
19. Option to deny USB connection: denied always; denied when locked; and allowed always
20. Hardened webview with Google and other "interesting" IPs removed
21. Prevention of bruteforcing screen pin: the phone will reboot upon 3 unsuccessful attempts
22. Perfect_Event_Paranoid ported from Grsecurity: now third party apps can't use other apps including system to elevate privileges
23. Camera hardware button works to focus, take pictures and start video recording
24. Option to disable writing to Tombstones (a lot of private info is dumped there if there is a crash)
25. Option to disable continuing writing of logcat
26. Option to disable device cameras: back; front, both or none
27. Always latest Google Security Patches
28. Always latest Code Aurora Security Patches
29. Changes ported directly from Google Android Gerrit, so most of those in MM and even N are in this rom
30. About 80% of kernel changes are ported into Jaguar kernel from 3.10 and 3.18 (not Sony AOSP 3.10, but Linux/Google/Code Aurora one)
31. Rom is odexed to significantly increase boot speed (under 30 seconds) and application start
32. Many more security features ported from Linux and Copperhead OS
33. Sony Timekeep
34. DNS Encryption, as well as the choice of multiple DNS providers
Other features include: Stereo Sound; Layers Theme Engine; Native Call Recording with interface integrated in Dialer with no restrictions; Privacy Guard; Native Wakelock Blocker; Native Black List; Global Menu; Slim Recents; Traffic Indicators; Advanced Reboot; Slim Pie; CPU Info on Screen; Ram Bar in Recents; Open source Superuser included and integrated in Settings; True Offline Charging with Screen Off; Kernel Adiutor included (unzip and install as a normal app) and integrated in Settings; FM Radio and Recording plus more
Things users need to know to have smooth experience:. These are not bugs, but rather an explanation of some features
1. If you want to do data encryption, keep in mind that unlike Android, Jaguar uses 256 bit encryption. If you were encrypted on other roms, you won't be able to decrypt. So, wipe encryption and then re-encrypt on Jaguar. Also, keep in mind that if you ever did factory reset on official TWRP 3+ for honami, your data partition is screwed and have to be resized to enable encryption. This has nothing to do with the rom, but rather with the official TWRP itself. Fastboot my unofficial TWRP 3.0.2, which, by the way has working brightness, as well as ability to decrypt and mount data
2. Jaguar contains a script running on early boot, which cuts the internet access to both WIFI and Data until Afwall is running. This is done to prevent leaking, as well as having all your internet traffic routed through some interesting number of servers, including this IP: 26.147.196.22. So, install Afwall and activate it, otherwise, no Internet for you
3. If your system language is different from English and you want to make changes in Phone/Cell Network settings, switch to English first, make the changes and then return to your language. The changes you made will hold. If you try to make the changes in your language, you will have com.android.phone crash. Localization takes time and is virtually impossible to implement in Jaguar, which is a one-person-rom
4. Qcom Time Services daemon is disabled to prevent leaking. That means that you have to set Time/Zone to automatic to get it directly from your carrier. Otherwise, you won't have the correct time on reboot. Forget it. Sony TimeKeep is now setting the correct time on reboot and without the Internet, even in Airplane mode
5. Dnscrypt: in Settings/Security you have a new feature allowing the use of different dns providers (all encrypted), instead of your provider's default one. In Afwall, you must allow access to 'apps running as root'. Otherwise, no internet
6. Supersu is no longer bundled with the rom. Activate Developer settings and enable builtin root there. Open source Superuser is now included. Activate root choices within the app
7. If you use Gapps, they must be flashed right after the rom and before reboot. If you reboot even once, you will have multiple Gapps f/c due to incorrect permissions
Download: All updates and change logs are in Post #3 now
Instructions:
YOU MUST HAVE LATEST STOCK LP 5.1.1 FLASHED ONCE ON YOUR DEVICE. Otherwise, you may experience hardware (mainly Gps problems). If after the official LP 5.1.1, you downgraded to any other official stock version, you must reflash stock LP 5.1.1
1. Have TWRP (fastboot my unofficial version), unlocked bootloader and root.
2. In TWRP, wipe data/factory reset, then wipe System/Data/Cache/Dalvik
3. Flash the rom
4. If you use xposed, flash the latest installer. Xposed no longer works and will never work with roms that incorporate Nougat security features. Xposed used a security hole that was closed by Google. Bye bye Xposed...
5. If you want Gapps, flash them before any reboot. Otherwise, you will have multiple problems due to permissions.
6. Reboot, install Afwall and Kernel Adiutor as normal apps; activate Afwall to have Internet
7. Enjoy the rom, say thank you, donate or do both
Warning: If your device and/or anyone in the immediate vicinity dies, don't blame me: it is all China and Russia's fault. :laugh:
Credit: CM, AOSP, Slimroms, DU, Copperhead OS, Myself5 (kernel)
UPDATED KERNEL SOURCE: https://forum.xda-developers.com/devdb/project/dl/?id=23107 . Don't flash. This is not kernel, but rather sources to compile kernel
Kernel Sources: https://github.com/AOSP-Argon/android_kernel_sony_msm8974
XDA:DevDB Information
Jaguar Rom , ROM for the Sony Xperia Z1
Contributors
optimumpro
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP, Slimroms, DU
Version Information
Status: Stable
Current Stable Version: 6.0
Stable Release Date: 2016-02-09
Created 2015-08-29
Last Updated 2017-02-09
Update on Further developemnt
February 16. I broke my Z1 screen again and I am not in the mood for after market screens. And I am sick and tired of Sony crappy treatment of development community.
I am now looking at Lenovo Zuk Z2 or Z2 pro. Both excellent phones with the latest CPU and made out of metal and glass by Motorola which they bought from Google a couple of years ago. Zuk is friendly to developers and their blobs don't dumb down camera and they don't seek to "unify" bugs for all their devices. I no longer wish to support a fat bastard corporation that can't make a good phone, but thinks that just by putting their logo on the phone would make it worth $700.
RE Jaguar. I will continue to maintain Jaguar mainly with security patches... for a while, but my main work will be concentrated on Zuk. There is a lot of work to be done cleaning Android N and implementing security and other features from Jaguar...
This is where you get the latest update
March 21. New release:
1. March Security patches
2. New Superuser
3. Updated kernel
Download: https://forum.xda-developers.com/devdb/project/dl/?id=23814
____________________________________________________________________________
February 9. New release:
1. February Security patches
2. DNS_Crypt (in settings/security)
3. Seccomp (secure computing implemented in kernel)
4. Open Source Superuser integrated
5. Silent SMS notification enabled
6. 1440p profile in camcorder added
If you enable Dnscrypt and you use Afwall, allow internet to apps running as root...
If you prefer closed source Supersu, just flash the zip...
Download: https://forum.xda-developers.com/devdb/project/dl/?id=23069
____________________________________________________
January 20. Good News! Time service completely fixed. Qcom's crappy and creepy service taken out and replaced with Sony open source TimeKeep ported from MM/N. No connection to the internet needed. Everything is done locally on the device. TWRP has also been modified to set the correct time on boot.
The wayTimeKeep works is that before the shut down, it saves the properly set time and on reboot restores it (after the down time calculation). TWRP also reads that value on boot. For those who have encrypted data: the correct time in TWRP will be set after you enter boot password and data is decrypted and mounted.
Download Rom: https://forum.xda-developers.com/devdb/project/dl/?id=22743
Download TWRP: https://forum.xda-developers.com/devdb/project/dl/?id=22742
___________________________________________________________________________________
January 5. New release with January security patches and more. Also back is qcom time domain.
Download: https://forum.xda-developers.com/devdb/project/dl/?id=22428
You may flash dirty if on a previous release. Otherwise, fresh install (read directions)
P.S. This build included an experimental kernel. So, if you have any problems, flash the stable version in fastboot (unzip the file first): https://forum.xda-developers.com/attachment.php?attachmentid=3995799&d=1483894575
__________________________________________________________________
December 13. Stereo Sound is here. This is based on Dontbelive mode, but it is just clean stereo sound (ear piece and loud speaker), no bass or any other ridiculous "improvements" that do nothing, but distort. And as a result, just a clear stereo sound for games, videos, songs etc...
Just flash the zip in TWRP and reboot. Remember, this is not a rom, but a stereo-sound mode to flash on top of Jaguar...
After installing this, you have to make one call to recalibrate the sound. Otherwise, you may have distortions in the ear piece....
Download: http://forum.xda-developers.com/devdb/project/dl/?id=22080
Credit to Dontbelive...
___________________________________________________________________________________
December 9: New release to include:
1. December Security Patches
2. Signature spoofing feature (cherry-picked from Omnirom)
3. USSD should work now
Download: http://forum.xda-developers.com/devdb/project/dl/?id=21987
__________________________________________________________________________________
November 16. Kernel with DirtyCow fix. Download and flash in recovery. This is not for fastboot.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=21563
___________________________________________________________________
November 10. Rom updated to include November Security Patches+. I have also removed Supersu, as the rom has a built-in root manager. However, if anyone wants to install Supersu, you can easily flash it in recovery
Download: http://forum.xda-developers.com/devdb/project/dl/?id=21427
________________________________________________________________________________
October 10. Kernel-no-overclock.
Unzip and flash in fastboot.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=20848
_________________________________________________________________________________
October 9. Updated Kernel, which includes:
1. Updated higher frequency voltage
2. Improved Prima/Wifi driver
Your CPU variant may require voltage adjustment in Kernel Adiutor for new frequencies. Try to give a load for CPU and if you have freezing or random reboots (which you shouldn't), adjust higher 3 by +10/20. This latest kernel achieves 40000+ antutu score with Ondemandplus with temperature rising to about 58 at the highest load...
Note that some CPU/GPU variants just won't go to 2803 for CPU or 600 for GPU
Instructions: Unzip boot.img and flash in fastboot: fastboot flash boot boot.img or use various apps to install without fastboot
Download: http://forum.xda-developers.com/devdb/project/dl/?id=20838
__________________________________________________________________________________
October 8. Rotating Home Screen: if you want your home screen rotate like on a tablet, flash the attached file in recovery and reboot. So, when you set display to rotate, home screen will be included
__________________________________________________________________________________
October 5. New release:
1. Kernel overclocked to 2803: experimental, I have used it for 10 days without problems
2. October security patches from Google and Code Aurora
3. Over 80 commits from Google Master Gerrit which included changes to bionic, art, frameworks and system
4. Updated Afwall
5. Maybe more
This rom is now about 40% Nougat. One of the side effects: Xposed framework no longer works, but getting rid of it and instead using Privacy Guard is almost as good. Don't forget, Xposed is an exploit, which provides hooks for good and bad things.
Rom Download: http://forum.xda-developers.com/devdb/project/dl/?id=20788
Afwall/Kernel Adiutor Download: http://forum.xda-developers.com/devdb/project/dl/?id=20787
You can flash dirty if on a previous release
_________________________________________________________________________________
September 8. Rom updated to include:
1. September Google security patches
2. Latest Code Aurora patches https://www.codeaurora.org/projects/security-advisories
3. MPdecision is permanently disabled due to interfering with other hotplug and CPU frequencies. Default is MSMdecision, but you can pick several others in Kernel Adiutor
4. CPU overclock and underclock removed: no benefit whatsoever
5. More hardening ported from 3.18, 4.1 and 4.4 kernels: https://android-review.googlesource.com/#/q/hardened,25 You won't find those in any rom custom or stock. This is from 3.18-4.4 kernels and it has nothing to do with Sony AOSP. That's why it works...
6. About 70-80 commits from Android Master Branch. Folks. This is no longer a lollipop rom
7. PXN security feature implemented, which takes advantage of special instructions on ARMv7 to prevent unprivileged execution. See here: https://android-review.googlesource.com/#/c/265892/
8. Further integration of VOLTE
9. Kernel Adiutor: author has decided to go with Mobile Ads/Adview/Adbanner. So these were removed...
10. Camera: improvements to camera wrapper (missing entries), as well as some modifications in /frameworks/av/camera, so, you have a sharper picture. See photo attached, although, XDA reduces pictures... . This was taken with Open Camera. Not the crappy Sony Open Camera, but the fully open source one, with many features including several focusing modes: https://f-droid.org/repository/browse/?fdfilter=open+camera&fdid=net.sourceforge.opencamera. Tell me bootloader locked stock camera is better. It is not...
11. Maybe more...
WARNING: you need to do one thing after flashing the rom: flash the latest stock baseband. BASEBAND ONLY. If you don't, you will only have LTE: no H+/H/2G. This is a one-time procedure and is due to Volte implementation. You can either use FlashTool to flash stock baseband or a Partition Backup App (from Googleplay or elsewhere) to backup and restore your modems. With FlashTool, first flash the rom, then reboot, then flash the latest baseband. With Partition Backup, first, backup your modems, then flash the rom, then restore modems and reboot. You have been warned. I don't want to hear cries: where is my 3G!
Download Rom: http://forum.xda-developers.com/devdb/project/dl/?id=20287
Download Afwall/Kernel Adiutor: http://forum.xda-developers.com/devdb/project/dl/?id=20282
You may flash dirty if on a previous release. Otherwise, clean flash...
1st! Thanks @optimumpro
Sent from my Xperia Z1 using Tapatalk
Downloaded and flashed so far great ROM but 1st issue I noticed I believe data is turned off at ROM start up so setting up Google etc... Is hard without WiFi other than that ultra smooth and really fast great work. @optimumpro I don't suppose you know how to get OK Google everywhere to work do you on all ROMs I have tried its never there
Hope to see FAB in recents in next build if possible though as the remove recents is kinda small and the hover notifications kind of cover over it
Sent from my Xperia Z1 using Tapatalk
Is there still a bug when you turn Bluetooth off and on and it changes the Bluetooth MAC address? (as well as the same WiFi MAC for every device)
danny19901 said:
Downloaded and flashed so far great ROM but 1st issue I noticed I believe data is turned off at ROM start up so setting up Google etc... Is hard without WiFi other than that ultra smooth and really fast great work. @optimumpro I don't suppose you know how to get OK Google everywhere to work do you on all ROMs I have tried its never there
Hope to see FAB in recents in next build if possible though as the remove recents is kinda small and the hover notifications kind of cover over it
Sent from my Xperia Z1 using Tapatalk
Click to expand...
Click to collapse
Data is off by default on first boot only to prevent the phone from connecting before you set it up (firewall etc.). Just turn it on and it will stay on despite reboots. Ok Google? Oh, that's too complicated for me.
matcho13579 said:
Is there still a bug when you turn Bluetooth off and on and it changes the Bluetooth MAC address? (as well as the same WiFi MAC for every device)
Click to expand...
Click to collapse
Not sure about bluetooth, but wifi mac is fine.
The ROM is one of the best i have tested..
There are 2 ways to get superuser: Developer option and supersu
jos_031 said:
The ROM is one of the best i have tested..
Click to expand...
Click to collapse
Totally agree with you.
I was also able to set my WiFi MAC without any problems.
The layers thing is also a very good alternative.
My Z1 is now really hot, I hope it will calm down after some days of use.
@optimumpro: Keep on with this good mix [emoji3]
schickel said:
Totally agree with you.
I was also able to set my WiFi MAC without any problems.
The layers thing is also a very good alternative.
My Z1 is now really hot, I hope it will calm down after some days of use.
@optimumpro: Keep on with this good mix [emoji3]
Click to expand...
Click to collapse
Tweak cpu voltages and governors. You should not have any overheating. Also, don't put any stress on cpu while the phone is charging. Phones are not designed to be used while on a charger: they only get current from the battery, unlike laptops, so, when you are on charger and using the phone, you stress the battery and cpu.
Does everything work with this rom? modem, camera and recharge while the phone is off?
dejawho said:
Does everything work with this rom? modem, camera and recharge while the phone is off?
Click to expand...
Click to collapse
Yes everything seems to be working great modem, camera etc...
Prime Red Dark Layers Theme is really nice I tried Scarlett but has Playstore changelog no text bug
Oh I have xposed installed also for flat style status bar, always correct, force expanded notifications this ROM is by far the best ultra quick
1 big question just noticed how come colour picker tint overlay is still in the dialer ? I thought this was removed in 5.1.1 ? As you can see with the red overlay (This is my very Old Number)
Sent from my Z1 using Tapatalk
I noticed that when I get a call, the phone has to switch back to GSM signal. If I don't have GSM listed in the preferred network types, I could not be reached on the phone - goes straight into a busy tone... Anybody else experienced this?
caki25 said:
I noticed that when I get a call, the phone has to switch back to GSM signal. If I don't have GSM listed in the preferred network types, I could not be reached on the phone - goes straight into a busy tone... Anybody else experienced this?
Click to expand...
Click to collapse
This is a normal behavior. Your phone is a GSM phone. Now, if your carrier provides voice over 3g, then your phone will swith to 3g/H+ from LTE. If you have Volte (voice over LTE), it will stay on LTE. In most of the world there is no Volte yet, so, if your data is LTE, then when you get a call, the phone switches to 3g/H+. If your carrier does not provide calls over 3g (2g only) and you are on WCDMA/LTE, then you won't receive any calls. In that case you should switch to GSM/WCDMA/LTE.
Again, as I have already said, that's the behavior on all roms. Other roms just don't have the options in cell menu that this rom has and changing networks in phone test menue does not stick on reboot. So, you have to know what you are doing...
optimumpro said:
This is a normal behavior. Your phone is a GSM phone. Now, if your carrier provides voice over 3g, then your phone will swith to 3g/H+ from LTE. If you have Volte (voice over LTE), it will stay on LTE. In most of the world there is no Volte yet, so, if your data is LTE, then when you get a call, the phone switches to 3g/H+. If your carrier does not provide calls over 3g (2g only) and you are on WCDMA/LTE, then you won't receive any calls. In that case you should switch to GSM/WCDMA/LTE.
Click to expand...
Click to collapse
I guess I managed to jump too hastily again ... it does make sense of course, and I should have noticed that before. The default setting threw me off I guess, since that was without GSM and when my boss tried to reach me, he just got a busy tone anyhow, thank you so much for the explanation and this wonderful ROM. I just can't move away from Layers anymore
caki25 said:
I guess I managed to jump too hastily again ... it does make sense of course, and I should have noticed that before. The default setting threw me off I guess, since that was without GSM and when my boss tried to reach me, he just got a busy tone anyhow, thank you so much for the explanation and this wonderful ROM. I just can't move away from Layers anymore
Click to expand...
Click to collapse
"Default setting". That's my fault, I shouldn't have assumed that everyone has voice over 3g. I will change this in the next release, but your selection GSM/WCDMA/LTE should stick after reboot.
Thanks for a great ROM! Will this be your main ROM from now on?
Do you recommend to use the kernel defaults or do you have other settings for voltage, governor etc. that you recommend?
This is a really good ROM! Good job @optimumpro! :good:
The feature I really miss from your unofficial DU ROM is the ability to block System Wakelocks. I have serious wakelocks on my phone due to Play services and I don't like Xposed too much (compromises security and drains battery).
Could you add this feature? Thanks!
OK starting to get Random Reboots but I think it's my kernel settings as I had no issues at all except when screen waked up wouldn't let me unlock for a little while so I altered few things fixed that problem now I get random reboots
Sent from my Z1 using Tapatalk

UPDATED March 3 [ROM][LP5.1.1 r34 TESLA_REDUX_RESURRECTED_UNOFFICIAL

Directions to setup wifi/data without captiveportal and with Afwall:
http://forum.xda-developers.com/showpost.php?p=62560397&postcount=3
March 3. New release.
1. LP 5.1.1 r.34
2. Up to day google/cm changes
3. Improved WIFI handling to cellular
4. M5 kernel with fixed sound
Download: http://forum.xda-developers.com/devdb/project/dl/?id=17183
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
February 15. Updated kernel to fix headphone sound.
Download: forum.xda-developers.com/attachment.php?attachmentid=3647315&d=1455549561
Unzip and flash in fastboot
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
]anuary 24: Rom updated to release 33
Warning: All my roms now include a custom script that executes on boot, not at init.d level, which comes much later, but at init.rc. This script disables internet access to prevent data leaking from android system during boot before init.d or your firewalls come in. After the phone is booted and Afwall starts, it resets iptable rules and you then have the internet. Afwall is a must if you care about your privacy and battery life. If you, however, are not going to use Afwall, then delete the following file: /system/etc/crashdod.sh and reboot.
1. Release 33
2. January security patches
3. Wakelock blocker added
4. Updated M5 kernel to include latest CM/Sony changes
Kernel Source: https://github.com/AOSP-Argon/android_kernel_sony_msm8974
Download: http://forum.xda-developers.com/devdb/project/dl/?id=16401
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
November 25. Updated M5 Kernel built with the latest Ubertc 5.2.1 Nov 21 edition. Also, Sony bootlogo image themed in a teal color, the Tesla way.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=15345
Unzip and flash. Or you can flash the image with Kernel Adiutor.
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
November 22: New build. This is release 29 with Anti-Piracy features removed. Probably the final build. Enjoy.
Download: http://forum.xda-developers.com/devdb/project/dl/?id=15314
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
November 1. New kernel. [/COLOR]
1. Enabled hardware based encryption mixed with software (you need to re-encrypt to have the feature),
2. Enabled hardware random number generation also mixed with software
3. Your WIFI will work regardless of whether you have old wifi binaries or new
4. I have not incorporated some CM/M5 commits, as they cause random reboots.
5. Some security improvements in init files: now adb won't really work if usb debugging is set to off. Before that even if debugging was off, kernel would still get adb root rights during boot, which is insecure
Dowonload: forum.xda-developers.com/attachment.php?attachmentid=3527276&stc=1&d=1446392027
Sources for kernel: https://github.com/HonamiZ1/android_kernel_sony_msm8974
Instructions:
1. This boot.img does not have TWRP, so use Fota recovery image from my thread here http://forum.xda-developers.com/xperia-z1/orig-development/twrp-2-8-7-fota-partition-brightness-t3237229
2. Unzip boot.img and flash in fastboot: fastboot flash boot boot.img
3. To install TWRP 2.8.7 in Fota or Recovery (depending on whether you have upgraded your bootloader or not) do this also in fastboot: fastboot flash recovery recovery.img
4. Reboot. Now, you will have TWRP independent from kernel
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
This is Tesla-Redux resurrected by me. As you know, the latest official build does not recognize simcard, virtually turning your phone in a wifi device. Moreover, rhine devices are no longer officially supported and the honami thread itself is closed. Well, I fixed the simcard issue and built the rom from the latest sources.
Features include: SlimPie, RRO Layers, Customizable QS Tiles, SlimRecents, Slim's Power Menu, Slim's Nav bar, Hardware keys configuration, Animation Control, App Circle Sidebar, Lockscreen Weather, Screenrecorder settings, Kernel Aduitor built in plus more. My usual hardened features include hardened kernel (modified M5) plus removed nefarious IPs pooped by Google all over the source; full network choice in Cell menu; background wifi scanning is disabled for privacy and battery sake; cell network is handled by Android, as opposed to the modem; Volte provisioned; TWRP 2.8.7 in boot image, and much more...
This rom does NOT include the latest CM power scheme change, which causes random reboots and other issues. It is neither in this rom nor in my DU or Jaguar rom. The original power scheme was fine, no bugs, nothing to fix. So, why fix it, especially, that CM and Sony folks are incorporating 5-10 year old changes just now. I am not blaming Sony kernel developers, as they are not given the latest Sony blobs that are used in stock. So, as a result, they are working like kittens in the dark trying to bridge kernel with android and hardware. The same applies to the latest kernel commits including wifi. Prima driver worked fine in my latest Jaguar/DU builds, there were no WIFI issues. Moreover, the latest M5 changes cause multiple errors during build, so, kernel in this rom is stable as of October 8 or 9. This is the best you can get, as I doubt anyone will be paying any attention to lollipop any longer. .
Usual XDA warning: if your device dies or kills everybody in the vicinity, blame Putin, but I don't recommend it, since Russians mean business nowadays.
Instructions:
1. Unlocked bootloader, root and TWRP recovery
2. Wipe everything including internal SD card
3. Flash the rom, reboot and enjoy
Credit: Tesla Team, Slimroms and CM
Download: http://forum.xda-developers.com/devdb/project/dl/?id=14909
Kernel Sources: https://github.com/AOSP-Jaguar/android_kernel_sony_msm8974
XDA:DevDB Information
TESLA-REDUX-RESURRECTED, ROM for the Sony Xperia Z1
Contributors
optimumpro
Source Code: https://github.com/tesla-redux
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP,Slimroms,CM
Version Information
Status: Stable
Stable Release Date: 2015-10-26
Created 2015-10-26
Last Updated 2016-03-03
Reserved
Mine
optimumpro said:
This is Tesla-Redux resurrected by me. As you know, the latest official build does not recognize simcard, virtually turning your phone in a wifi device. Moreover, rhine devices are no longer officially supported and the honami thread itself is closed. Well, I fixed the simcard issue and built the rom from the latest sources.
Features include: SlimPie, RRO Layers, Custimizable QS Tiles, SlimRecents, Slim's Power Menu, Slim's Nav bar, Hardware keys configuration, Animation Control, App Circle Sidebar, Lockscreen Weather, Screenrecorder settings, Kernel Aduitor built in plus more. My usual hardened features include hardened kernel (modified M5) plus removing nefarious IPs pooped by Google all over the source; full network choice in Cell menu; background wifi scanning is disabled for privacy and battery sake; cell network is handled by Android, as opposed to the modem; Volte provisioned; TWRP 2.8.7 in boot image, and much more...
Usual XDA warning: if your device dies or kills everybody in the vicinity, blame Putin, but I don't recommend it, since Russians mean business nowadays.
Instructions:
1. Unlocked bootloader, root and TWRP recovery
2. Wipe everything including internal SD card
3. Flash the rom, reboot and enjoy
Credit: Tesla Team, Slimroms and CM
Download: http://forum.xda-developers.com/devdb/project/dl/?id=14909
Kernel Sources: https://github.com/AOSP-Jaguar/android_kernel_sony_msm8974
XDA:DevDB Information
TESLA-REDUX-RESURRECTED, ROM for the Sony Xperia Z1
Contributors
optimumpro
Source Code: https://github.com/tesla-redux
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP,Slimroms,CM
Version Information
Status: Stable
Stable Release Date: 2015-10-26
Created 2015-10-26
Last Updated 2015-10-26
Click to expand...
Click to collapse
Ready 2 test but will it work on C6902? Its Modem?
happy3777 said:
Ready 2 test but will it work on C6902? Its Modem?
Click to expand...
Click to collapse
Just flash C6902 modem on top: it is not a big deal...
You sir are a legend... Can't figure which one to use, Tesla or Jaguar Right now I'm on Tesla, testing stuff
Quick update, since GZR does not support our devices for some time now, they probably did not include the patch for headphones... would you mind to include it? I'm pretty sure that that bug is not present in Jaguar or DU
THANK TOU!
caki25 said:
You sir are a legend... Can't figure which one to use, Tesla or Jaguar Right now I'm on Tesla, testing stuff
Click to expand...
Click to collapse
Thank you. I am now on Tesla and it is hard to say which one is better. Jaguar is a little lighter, though. but Tesla guys have changed some animation timing, so, even if you turn off animation in developer section completely, it still feels a little different. I think Jaguar is lighter and a little faster, but Tesla feels smoother...
Does this and the jaguar ROM have the random reboot problems that Resurrection Remix is having?
Thanks.
YaqubYahya said:
Does this and the jaguar ROM have the random reboot problems that Resurrection Remix is having?
Thanks.
Click to expand...
Click to collapse
Not at all. Read the OP regarding random reboots on other roms...
optimumpro said:
Not at all. Read the OP regarding random reboots on other roms...
Click to expand...
Click to collapse
Oooooh, I'll most likely switch over tomorrow, which ROM do you recommend? Jaguar or Tesla?
Thanks for your great work!
optimumpro said:
Just flash C6902 modem on top: it is not a big deal...
Click to expand...
Click to collapse
Modem Zip never forked for me
Only cm12.1 is working for me without modem,
Either I always get a broken wifi on using modem
:crying:
happy3777 said:
Modem Zip never forked for me
Only cm12.1 is working for me without modem,
Either I always get a broken wifi on using modem
:crying:
Click to expand...
Click to collapse
You sure you used the correct one? http://forum.xda-developers.com/showthread.php?t=2614645
Works for others...
Hi, loving the rom! However is there any way of changing how curved the edges of everything is? I really don't like it, thanks.
YaqubYahya said:
Hi, loving the rom! However is there any way of changing how curved the edges of everything is? I really don't like it, thanks.
Click to expand...
Click to collapse
Have you changed screen resolution at all?
I don't know. I only start to see screen irregularities after 3-4 glasses of red wine.
optimumpro said:
You sure you used the correct one? http://forum.xda-developers.com/showthread.php?t=2614645
Works for others...
Click to expand...
Click to collapse
Ok I will try it today and report it 2 U
Thanx
How is the battery life on this ROM? That's my main prblm
optimumpro said:
Have you changed screen resolution at all?
I don't know. I only start to see screen irregularities after 3-4 glasses of red wine.
Click to expand...
Click to collapse
I think he's referring to the rounded corners of the notifications and the recent apps.
OT: I personally like it
What is the differentiating feature of this..
New kernel. See OP for description
optimumpro said:
New kernel. See OP for description
Click to expand...
Click to collapse
Can I flash this via twrp?
Ohhdayumm said:
Can I flash this via twrp?
Click to expand...
Click to collapse
No, it's a boot.img, so, you'll need a laptop...

[ROM] JAGUAR OREO 8.1 ONEPLUS 5 OFFICIAL - Updated JANUARY 12

Welcome to Jaguar Oreo 8.1. As some may know, the emphasis of the project is on Security and Performance. I have recently transitioned from Lenovo Zuk Z2 plus and previously from Sony Xperias, and the rom is still actively maintained for Zuk Z2. You are welcome to visit the thread for user feedback: https://forum.xda-developers.com/lenovo-zuk-z2/development/jaguar-oreo-8-1-official-t3734597
In addition to most, if not all, familiar Oreo features starting from multiple options in statusbar, navbar, QS, gestures etc. to alarm blocker, wakelock blocker, smart pixels and omni features (I am not going to list all of them), you will have the following:
1. Hardened/fortified bionic (over 150 commits) to prevent bad behavior by system and third party apps.
2. Many classes and resources are NOT pre-loaded or compiled during boot. Instead, they are compiled after the initial startup and put in ram and cache. So, after initial settling, you will have increased speed in almost everything: interface transitions, app startup time, etc. . In addition, it takes 4-5 seconds to fully boot, after Oneplus logo ends (initial boot after flashing will obviously take longer).
3. Most runtime permissions are limited to 'read only'.
4. FBE encryption is replaced with FDE, and it is not forced. Plus, you can have separate passwords, one longer for boot and another short one for screen lock. I, personally, don't like FBE. I think it is weaker than FDE. Also, I don't want my device to boot at all or be partially decrypted, unless I enter boot password.
5. Many additional security features are enabled in kernel. Kernel is based on DU for Oneplus 5 (the work on it just started).
6. Yama security to replace Selinux.
7. Wireguard support in kernel
8. DNS over TLS
9. Background WIFI scanning is hard-disabled
10. Type zero sms: phone's silent response 'received and processed' (without user noticing) eliminated. If you don't know what type zero sms is, Google it. Not class zero sms, which flashes on screen, but doesn't get saved, but rather type zero, which doesn't show at all, but nonetheless is silently acknowledged. Creepy.
11. MicroG support.
12. Builtin CPU power profiles, based on AKT profiles (heavily modified)
13. Sound control and KCAL are added in kernel
14. Fully working native recorder (in Dialer on active call)
INSTRUCTIONS:
1. Be on 5.1.4 firmware
2. If you are encrypted, you must do factory reset in TWRP (you will have to type 'YES' for factory reset). This will result in all data including internal SD erased. So, transfer the contents to your PC. If you are decrypted, you may skip this step. You may think you are decrypted, but make sure that it is in fact so: check in Settings/Security. If it says phone encrypted, you must do factory reset in TWRP.
3. After factory reset, reboot in TWRP and format system/dalvik-cache/data/internal SD again, as TWRP apparently leaves some remnants of encryption after factory reset.
4. Transfer the rom, Gapps, Magisk and whatever else you need to internal card; flash the rom; flash Gapps (optionally) and reboot
5. Go back to TWRP and flash Magisk (optionally). Why not flash Magisk right away? Because Gapps need to run once before Magisk to get appropriate permissions
ROM DOWNLOAD: https://androidfilehost.com/?fid=1322778262904007030
Subsequent releases (and I will continue to update until Android 9 becomes stable) will be in post #3.
WARNINGS: Usual XDA: Get ready to be burned and don't complain
CREDIT: AOSP, CopperheadOS, DU, Omni, Slim, Lineage, Benzo, Carbon, Xtended, AKT profiles team
Also, credit for a Jaguar bootanimation to @Ashish9 and @The.Night.King who made one of the header's icons
Kernel Source for October 8 release and on: https://github.com/AOSPME/android_kernel_oneplus_msm8998
Kernel Source: https://github.com/optimumpr/android_kernel_oneplus_msm8998
Bionic Source where most commits came from: https://github.com/CopperheadOS/platform_bionic
XDA:DevDB Information
JAGUAR OREO ONEPLUS 5, ROM for the OnePlus 5
Contributors
optimumpro, optimumpro
Source Code: https://github.com/optimumpr/android_kernel_oneplus_msm8998
ROM OS Version: 8.x Oreo
ROM Kernel: Linux 4.x
ROM Firmware Required: Unlocked bootloader and 5.1.4 firmware
Based On: AOSP, DU, Lineage, Omni, Xtended, Carbon, Benzo, Slim
Version Information
Status: Stable
Stable Release Date: 2018-09-16
Created 2018-09-16
Last Updated 2019-01-12
Instructions on FDE encryption
How to encrypt the phone:
The rom has FDE, instead of FBE, and it is not forced. So, you will be decrypted, unless you encrypt.
You can encrypt within Settings, but the preferred way is to do it via ADB. This way, you could have 2 separate passwords one longer for boot and another shorter for screen lock. YOU MUST HAVE MAGISK INSTALLED FOR ADB method to work.
1. DON'T set up screen lock pin/password/pattern yet
2. Enable ADB in Developer settings
3. Connect the phone to your PC. Open terminal (on PC) and type adb devices to make sure that the phone is listed
4. Type adb shell and press enter; type su and press enter - at this point, you should have Magisk prompt (on the phone) for root; grant it for at least 20 minutes - the prompt on terminal should change to root
Now the fun part:
5. type vdc cryptfs enablecrypto inplace password "your actual password" and press enter
WARNING: No quotation marks anywhere in terminal, and don't type the words 'your actual password', but rather your chosen password. There is no limit on the length of boot password.
The phone will reboot and start encrypting. In about 10-15 minutes, you will get a familiar prompt for boot password. After the first password input, the phone might not fully boot (it happened to me). In this case, just force-shutdown and reboot.
After encrypting, you will lose root. So, re-flash Magisk. Otherwise, you might have kernel panic, due to Magisk not being able to find your lockscreen pin..
6. After everything is done and Magisk is working, set up a short pin/pattern/password for screen. WHEN ASKED IF YOU WANT SECURE BOOT, SELECT NO, because you already have it. If you select 'yes, your long boot password will be overwritten, which you don't want.
P.S. You can also do the same on phone's Terminal. In this case, skip 'adb shell' and start with 'su'. But in my experience, if you make a slight mistake with the password, you won't be able to boot, and you will have to do factory reset in TWRP, which will result in the loss of all data. On PC, you can still see the password you set and boot the phone
Updates are in this post
January 12. New release
1. January security patches
2. Oreo release 60
3. New and hardened clang chain
4. Separate ringtones for Sim1/2
5. Updated kernel
1. If you are on a previous release, you may flash dirty. Just make sure to wipe dalvik/cache
2. Coming from another rom, read the OP about doing factory reset
Download rom January 12 release: https://androidfilehost.com/?fid=11410963190603897246
November 8. New release
November security patches
Instructions:
1. If you are on a previous release, you may flash dirty
2. Coming from another rom, read the OP about doing factory reset
Download rom release November 8: https://forum.xda-developers.com/devdb/project/dl/?id=30812
October 11. New release
1. Fully working native call recording
2. KCAL in kernel
3. Sound control in kernel
Instructions:
1. If you are on a previous release, you may flash dirty
2. Coming from another rom, read the OP about doing factory reset
Download rom, October 11 release: https://forum.xda-developers.com/devdb/project/dl/?id=30630
____________________________________________________________________________________________________________________
October 8. Major release
1. Different kernel. EAS thrown out, as providing no benefits, and actually slowing down the phone. Now you have one of the best governors, Interactive, back
2. CPU profiles built in. Based on AKT profiles, but heavily modified. Now, you have 16 working CPU profiles (must be on Interactive)
Instructions:
1. If you are on a previous release, you may flash dirty
2. Coming from another rom, read the OP about doing factory reset
Download rom October 8 release: https://forum.xda-developers.com/devdb/project/dl/?id=30586
_______________________________________________________________________________________________________________________
October 5. New release
1. October security patches, Google Oreo release 48
2. Kernel overclocked to 2035 and 2592
Download Rom, October5 release: https://forum.xda-developers.com/devdb/project/dl/?id=30551
Instructions
If you are on a previous release, you can flash dirty. If coming from another rom, clean flash. If force-encrypted, you need to do factory reset in TWRP, reboot in TWRP and manually format /system/data/dalvik/cache/internalSD. Why? Because Jaguar has FDE, as opposed to FBE encryption, and it is not forced.
________________________________________________________________________________________________________________________
September 26. New release
1. Alert slider is fixed - all options work
2. System update toggle removed
Instructions: if you are on a previous release (or the original one), dirty flash; otherwise - clean flash
Download rom September 26 release: https://forum.xda-developers.com/devdb/project/dl/?id=30488
September 20. Rom updated
1. DNS-over-TLS (in Development settings)
2. Wireguard support added
3. A bunch of other commits in kernel.
Download rom release September 20: https://forum.xda-developers.com/devdb/project/dl/?id=30444
If you are on a previous release, dirty flash is fine.
What's U/B? And does the ROM support signature spoofing?
d1n0x said:
What's U/B? And does the ROM support signature spoofing?
Click to expand...
Click to collapse
U/B is unlocked bootloader. Signature spoofing is missing. Next release will have it.
optimumpro said:
U/B is unlocked bootloader. Signature spoofing is missing. Next release will have it.
Click to expand...
Click to collapse
Well considering you need to have an unlocked bootloader to flash TWRP and consequently custom ROMs, it's kind of redundant info
Alright, gonna try out the next release with MicroG!
Nice to see you here, i used to use jaguar at my z2 plus, WELCOME!!!
Welcome @optimumpro ? your ROMs for the Xperia Z1 were legendary. Good to see you here.
d1n0x said:
Well considering you need to have an unlocked bootloader to flash TWRP and consequently custom ROMs, it's kind of redundant info
Alright, gonna try out the next release with MicroG!
Click to expand...
Click to collapse
Most devs stopped implementing Microg, because you have both Xposed and Magisk modules for that.
Security and performance, I see! What about battery life?
Im_Mattgame said:
Security and performance, I see! What about battery life?
Click to expand...
Click to collapse
That's superior too, but emphasis is on security & performance.
This is a ROM that's truly user customized, request a useful feature and watch it get added.
Keep it up OP.:good:
Does this have MAC randomizer?
Zocker1304 said:
Does this have MAC randomizer?
Click to expand...
Click to collapse
The rom has it, but I haven't implemented it in kernel yet.
@optimumpro keep it up .
And to others .
The JAGUAR ROM emphasise mainly on SECURITY & RAW PERFORMANCE. Since you have a SD 835 , this ROM will make sure to use everything it has to offer .
So if you are searching for a performance ROM this is it.
PS : Jaguar is best served GAAPS LESS so if you are a anti google guy this might be the ROM for you.
optimumpro said:
The rom has it, but I haven't implemented it in kernel yet.
Click to expand...
Click to collapse
Means when implemented it will randomize my Mac on every reconnect?
WOW!
thank you!
learned from this thread already and hope very much to see this project continue.
is the fact that this is a userdebug build, test keys, and a permissive kernel a security/ privacy concern? maybe some of this will change? maybe xposed is the reason?
I lost track of xposed stuff quite awile back, maybe it will returning to my life! lol
ROM is very feature rich already, and the randomizer post a few back really caught my attention. Know of the reasoning for, but never have had the oportunity to use anything of the like
concerning the type zero sms. After googling about it im still not exactly sure about it all, but a question about it if i may. Does it matter what sms app is used?
I have been a fan if Signal for some time. I understand how it is best utilized when both/all parties use it. Seems it hides your sms from other apps tho too. Opinions of it? recomendations for differs?
please excuse my ignorance on amy of this, so much has changed over the past couple of years reguarding tech, privacy/security and android OS, while at that same time my time in front of a PC has grown less and less. I havent kept up as well as i should. I am not a dev, but always managed to follow along to maximize user control. I can read! lol
scorch away! but i wont be posting like a lil school girl any more. will be watching tho! :cyclops:
Fellings about bromite browser? maybe it can be implemented as the default webview? or even default browser?
https://www.bromite.org/
opinions on dnscrypt magisk module? i use it in its default installed iptables config
:good::highfive::silly:
Vcolumn said:
thank you!
is the fact that this is a userdebug build, test keys, and a permissive kernel a security/ privacy concern? maybe some of this will change? maybe xposed is the reason?
ROM is very feature rich already, and the randomizer post a few back really caught my attention. Know of the reasoning for, but never have had the oportunity to use anything of the like
concerning the type zero sms. After googling about it im still not exactly sure about it all, but a question about it if i may. Does it matter what sms app is used?
I have been a fan if Signal for some time. I understand how it is best utilized when both/all parties use it. Seems it hides your sms from other apps tho too. Opinions of it? recomendations for differs?
Fellings about bromite browser? maybe it can be implemented as the default webview? or even default browser?
opinions on dnscrypt magisk module? i use it in its default installed iptables config
Click to expand...
Click to collapse
User debug builds are no less secure than user builds. Instead of Selinux, you have Yama security implemented in kernel. I don't like Selinux. Apart from questionable origins, it is a huge monster that is, in my view, an unnecessary overhead.
Test key, as opposed to development/release key is just a name. All my keys, including the test key, have been uniquely re-generated. So, they are not Google's outdated keys that are included by default in all custom builds.
I use Icecat browser. With regard to dnscrypt, I have a better idea: DNS over TLS, and it is already done (will be in the next release), see picture.
Signal: There are many problems with the app and the developer. It's a long discussion, and I have already posted about in on XDA. One I would mention: the dev used to be harassed by TSA in airports. Then all of a sudden, he obtained over a $13 million funding channeled to him through a known government hand for "development" purposes. Then again, all of a sudden, he got lucrative contracts to provide "security" for one of the widely known "bastions" of privacy What'sup/Facebook. You don't get that for nothing. Next, he removed encryption capabilities from SMS portion of the app, the ones that really were forcing adversaries to go through the pains of targeting individual phones through the air, which is expensive. To tell you more: as long, as you have Gapps installed, any encryption is useless, as Google can get your outgoing messages before they are encrypted, and incoming ones after they are decrypted. People may say "sand box", "permissions", but as long as you have Google Services Framework, which is the central part of Google apps, it can do with your device whatever it wants without you ever noticing. And Signal can't work without Google services.
I use Silence for SMS.
Zocker1304 said:
Means when implemented it will randomize my Mac on every reconnect?
Click to expand...
Click to collapse
Yes. Although, it is somewhat difficult, because Qualcomm has a proprietary (as opposed to open source) implementation of MAC.
@optimumpro
Mate, any snapshots, please? Also, will MicroG or Nano-Droid work?
Also, does the GPS work, cause, that is the only reason, I am not able to get out of GApps. I want to be free of Google's Slavery Programme.
Danke. Vishal
vdbhb59 said:
@optimumpro
Mate, any snapshots, please? Also, will MicroG or Nano-Droid work?
Also, does the GPS work, cause, that is the only reason, I am not able to get out of GApps. I want to be free of Google's Slavery Programme.
Danke. Vishal
Click to expand...
Click to collapse
Microg should work with either Xposed or Magisk module. Without Google services, GPS would work with most apps, but not with Google maps, which require Gapps.
optimumpro said:
User debug builds are no less secure than user builds. Instead of Selinux, you have Yama security implemented in kernel. I don't like Selinux. Apart from questionable origins, it is a huge monster that is, in my view, an unnecessary overhead.
Test key, as opposed to development/release key is just a name. All my keys, including the test key, have been uniquely re-generated. So, they are not Google's outdated keys that are included by default in all custom builds.
I use Icecat browser. With regard to dnscrypt, I have a better idea: DNS over TLS, and it is already done (will be in the next release), see picture.
Signal: There are many problems with the app and the developer. It's a long discussion, and I have already posted about in on XDA. One I would mention: the dev used to be harassed by TSA in airports. Then all of a sudden, he obtained over a $13 million funding channeled to him through a known government hand for "development" purposes. Then again, all of a sudden, he got lucrative contracts to provide "security" for one of the widely known "bastions" of privacy What'sup/Facebook. You don't get that for nothing. Next, he removed encryption capabilities from SMS portion of the app, the ones that really were forcing adversaries to go through the pains of targeting individual phones through the air, which is expensive. To tell you more: as long, as you have Gapps installed, any encryption is useless, as Google can get your outgoing messages before they are encrypted, and incoming ones after they are decrypted. People may say "sand box", "permissions", but as long as you have Google Services Framework, which is the central part of Google apps, it can do with your device whatever it wants without you ever noticing. And Signal can't work without Google services.
I use Silence for SMS.
Yes. Although, it is somewhat difficult, because Qualcomm has a proprietary (as opposed to open source) implementation of MAC.
Click to expand...
Click to collapse
Thank you for the detailed insight. Although I have to say that Signal does work without Google play services. However, it falls back to a legacy polling method (increasing battery drain a bit) and shows a persistent notification in the status bar.
Great to see some privacy-conscious people here, amidst all of the Google fanboys who share every part of their life with Google and in the process jeopardize other people's privacy for the sake of "convenience".

Categories

Resources