I have been running lineageOS on my OnePlus 2. I liked it, but Lineage has stopped supporting my phone. There are two options that I have been able to find as replacements - postmarketOS and /e/OS. Any thoughts on those or other recommendation? Anything that gets security updates, is open source, and is functional meets my needs.

    • SlatlunOP
      5·
      3 years ago

      Great general info! Thanks for taking the time to put it together. Specifically, Graphene and Calyx support a combined total of 12 devices 11 of which are Pixels. Great for those users and it might inform what I buy in the future. Lineage supports tons of devices - great for anyone reading this who doesn’t care about the softened security (or doesn’t have another choice). Lineage is out for me specifically because my device is old/unpopular enough. /e/ still list support for my device, but I am guessing that since it is based on Lineage it won’t get meaningful support either.

      • Jama
        2·
        3 years ago

        It depend, /e/ could still continue to support your device if trees aren’t so outdated. Still, check frequently at least the security patch version

        • SlatlunOP
          1·
          3 years ago

          Thanks for the distinction. Just for the record and anyone asking the same question - /e/ does still support even though lineage dropped my device.

        • SlatlunOP
          1·
          3 years ago

          Maybe if I am ever looking at graphene I will. As I said it isn’t available on my device.

    • Jama
      5·
      3 years ago

      LineageOS don’t use permissive selinux and disabled nearly every function of userdebug build except for root functions over adb (that is disabled by default).

      The only real danger about LOS is the unlocked bootloader, but it can’t be solved by LineageOS developers, since it depend deeply by manufactorer.

      Still, even if it is a security risk it depend a lot about your threat model and if you usually install only trusted apps and navigate on trusted sites (or usually disable JavaScript) the actual attack surfaces isn’t really a problem for the common users, and there are only theoretical risks.

      The great thing about official LOS is the support of a lot of devices (and not only Google made) and the big community approval needed for every change.

      Community standards for LOS are actually really strict, and you can be pretty sure to have a stable system when you use official LOS on your device. Since there are dozens of supported devices it gives users a lot of freedom.