GrapheneOS on Nostr: This SDK checks the mount ID for /system/framework/framework.jar and disallows the ID ...

This SDK checks the mount ID for /system/framework/framework.jar and disallows the ID being above 900. They use this to detect mounts created by Magisk and similar software. We've changed our new secure spawning related code to always create this mount namespace in early boot.