[ROM][6.0.1_r81] LineageOS 13 [STABLE]?[Rom SPL 2019-03-05, Kernel SPL 2020-01-05]

gismoZ

Senior Member
Dec 1, 2015
443
2,005
0

Hi all. Here are my security driven LineageOS 13 builds. They are stable and contain the latest security patches. This is a long-term support rom.
From 20170614 build and onwards, the defaullt kernel is a fork of Radon, called "SecuRadon". It contains 400+ extra commits and almost all of them are security patches.
In order to change various kernel settings, flash the kernel zip only and follow the installer. Else use a kernel control application. For the default kernel settings read the FAQ.
You can find the changelog in the second post. Before asking questions, read the FAQ and use the search functionality.

Downloads

Instructions
  1. Read this and the second post.
  2. Download ROM.
  3. Reboot to recovery. It is recommended that you keep a full backup in
    case something goes wrong.
  4. If you are dirty flashing it over a previous build, wipe dalvik and cache.
    Else perform a full wipe (dalvik,system,data,internal,cache).
  5. Flash a firmware from the second post depending on your device (kenzo,kate).
  6. Flash ROM.
  7. [Optional] Flash kernel zip to change default settings.
  8. [Optional] Install GApps.
  9. Reboot.

Credit to
  • TheStrix for bringing official CM13 to our device.
  • Umang96 for his work on Radon kernel.
  • Cyanogenmod/LineageOS team.
  • Xiaomi for releasing the kernel source code.

Source Code
Kernel (SecuRadon): https://github.com/gismoZ/SecuRadon
Kernel (Stock-Discontinued): https://github.com/gismoZ/android_kernel_xiaomi_msm8956/tree/cm-13.0
Device: https://github.com/gismoZ/android_device_xiaomi_kenzo/tree/cm-13.0
Vendor: https://github.com/gismoZ/proprietary_vendor_xiaomi
Device QCOM Common: https://github.com/gismoZ/android_device_qcom_common


Version Information
ROM OS Version: 6.0.1_r81 Marshmallow
ROM Kernel: Linux 3.10.108
Supported Device: kenzo, kate
Status: Stable

Created: 07/01/2017
Last Updated: 28/02/2020
 
Last edited:

gismoZ

Senior Member
Dec 1, 2015
443
2,005
0
Firmware

Note: Before proceeding, make sure that you are permitted to officially unlock your bootloader.

The bellow firmwares are based on MM bootloader and there are two ways to go:
  1. Flash a miui rom that has MM bootloader. Unlock the bootloader officially. Flash firmware and rom.
  2. Flash firmware. If all is ok, it means that you are on officially unlocked MM bootloader. If you get
    a bootloop, it means that you were on LP bootloader and the MM one is now (re)locked. To solve this, boot
    into fastboot (you will be unable to boot into recovery) and use the official tool to unlock it.
You are supposed to be on a firmware from this post. If this is not the case, please do not report bugs.



FAQ

- What are the default kernel settings on the latest build?
Governor:performance interactive, Swappines:40, VFS Cache Pressure:100, IO Scheduler:fiops, Display:~6400k, Charging Rate: 2000mAh, Touch Boost:on, Adreno Boost:on, Adreno Idler:off, DT2W:on-no vibration FSYNC:on , ZRAM:512MB, Speaker Boost: +7, Wakelocks:disabled.

- I have a slow download speed issue while downloading from play store.
This issue was introduced in gapps at a previous time point and continues affecting all cm-13.0 based roms. The only workaround so far is the use of a VPN server.

- I am unable to use my goodix fingerprint sensor.
After flashing rom and before first boot, flash this patch and then kernel zip (choose goodix in installer).

- I want to unroot the rom.
All builds come pre-rooted. To unroot, download and flash this zip through recovery.

- My device soft reboots whenever I try to uninstall an app and settings force close whenever I try to set the lock screen.
Starting from 20170614 build and on, these issues are absent. In case you wish to use a previous build along with the discontinued stock kernel, then use this firmware. Note that this firmware is based on LP bootloader.

- VoLTE does not work.
This ROM does not support VoLTE . However, it was reported that this solution works. You can try it, but do not ask me for support.

- I am unable not watch purchased content such as movies from google play.
This is because google widevine modular DRM is missing. Download this and flash it through recovery.

- Does this ROM support microG?
Yes.

- Is there any modded google camera app with HDR+ for MM?
Yes. Check this post .

Changelog

Code:
[B]20190503[/B]
ROM:
- ROM Security Patch Level 2019-02-01, 2019-03-01.
- Synchronized repository.
Kernel (v6.1.19->v6.1.22):
- Kernel Security Patch Level 2019-02-05, 2019-03-05, 2019-04-05.
- Updated WireGuard kernel module (v0.0.20190123->v0.0.20190406).
- Major under the hood update: Added 126 patches. 

[B]20190204[/B]
ROM:
- ROM Security Patch Level 2019-01-01.
- Synchronized repository. 

[B]20190124[/B]
ROM:
- ROM Security Patch Level 2018-11-01, 2018-12-01.
- Synchronized repository.
Kernel (v6.1.17->v6.1.19):
- Kernel Security Patch Level 2018-12-05, 2019-01-05.
- Updated WireGuard kernel module (v0.0.20181119->v0.0.20190123).
- Added 7 patches.

[B]20181121[/B]
ROM:
- ROM Security Patch Level 2018-10-01.
- Synchronized repository.
Kernel (v6.1.16->v6.1.17):
- Kernel Security Patch Level 2018-11-05.
- Updated WireGuard kernel module (v0.0.20181007->v0.0.20181119).
- Added 2 patches.

[B]20181019[/B]
ROM:
- ROM Security Patch Level 2018-09-01.
- Settings/DeviceInfo - Provide "patch level" explanation and disclaimer.
- Synchronized repository.
Kernel (v6.1.13->v6.1.16):
- Kernel Security Patch Level 2018-09-05, 2018-10-05.
- Patched against Spectre-V1.
- Updated prima WLAN driver to LA.BR.1.3.6_rb1.19.
- Updated WireGuard kernel module (v0.0.20180809->v0.0.20181018).
- Added 37 patches.

[B]20180828[/B]
ROM:
 - ROM Security Patch Level 2018-07-01, 2018-08-01.
 - Updated System Webview to v67.0.3396.87.
 - Reduced radio logging.
 - Synchronized repository.
Kernel (v6.1.11->v6.1.13):
 - Kernel Security Patch Level 2018-07-05, 2018-08-05.
 - Updated WireGuard kernel module (v0.0.20180625->v0.0.20180809).
 - Added 22 patches.

[B]20180614[/B]
ROM:
 - ROM Security Patch Level 2018-06-01.
 - Synchronized repository.
Kernel (v6.1.10->v6.1.11):
 - Kernel Security Patch Level 2018-06-05.
 - Updated WireGuard kernel module (v0.0.20180420->v0.0.20180613).
 - Added 5 patches.

[B]20180514[/B]
ROM:
 - ROM Security Patch Level 2018-05-01.
 - Synchronized repository.
Kernel (v6.1.9>v6.1.10):
 - Kernel Security Patch Level 2018-05-05.
 - Added and enabled WireGuard.
 - Added 9 patches.

[B]20180423[/B]
ROM:
 - ROM Security Patch Level 2018-04-01.
 - Switched to a secure gps connection.
Kernel (v6.1.8>v6.1.9):
 - Kernel Security Patch Level 2018-04-05.
 - Added KSPL date to kernel version info.
 - Added 7 patches.

[B]20180312[/B]
ROM:
 - ROM security patch level 2018-03-01.
 - Fixed BlueBorne related changes from September 2017 ASB.
Device:
 - Set default heaphone gain to +7.
Kernel (v6.1.6>v6.1.8):
 - Kernel security patch level 2018-03-05.
 - Added 10 patches.
 - Reworked gesture options in aroma installer (DT2W,S2W,S2S).
 - Set default heaphone gain to +7.

[B]20180209[/B]
ROM:
 - ROM security patch level 2018-02-01.
 - Synchronized repository.
Kernel (v6.1.5>v6.1.6):
 - Kernel security patch level 2018-02-05.
 - Added 14 patches. 

[B]20180121[/B]
ROM:
 - ROM security patch level 2018-01-01.
 - Synchronized repository.
Kernel (v6.1.1>v6.1.5):
 - Kernel security patch level 2018-01-05.
 - Added but reverted "Boeffla wakelock blocker" due to alarm issue.
 - Added 5 patches.
 - Updated the list of security vulnerabilities.

[B]20171215[/B]
ROM:
 - ROM security patch level 2017-12-01.
 - Fixed "app crash/cause bootloop when build with aapt2" issue.
Device:
 - Updated default kernel config.
Kernel (v6.0.1>v6.1.1):
 - Kernel security patch level 2017-12-05.
 - Radon v6.1 changes.
 - Added 32 patches.
 - Updated the list of security vulnerabilities.

[B]20171113[/B]
ROM:
 - ROM security patch level 2017-11-01, 2017-11-06 (KRACK).
Device:
 - Updated default kernel config.
Kernel (v5.8.1->v6.0.1):
 - Kernel security patch level 2017-11-05.
 - Radon v5.9, v6.0 changes.
 - Added 19 patches.
 - Updated the list of security vulnerabilities.

[B]20171021[/B]
ROM:
 - Patched against KRACK (Key Reinstallation AttaCK) vulnerability.
 - Fixed "install button is disabled for some apps" issue.
 - Removed gecko and added jelly (from los 14.1) as the default browser.
 - Updated chromium-webview (Android System Webview) to 60.0.3112.78 (from los 14.1).
 - Updated chromium-libpac and V8 javascript engine (from aosp 7.1.2_r33).
Kernel (v5.7.1->v5.8.1):
 - Radon v5.8 changes.
 - Added 3 patches.
 - Updated the list of security vulnerabilities.

[B]20171015[/B]
Device:
 - Updated default kernel config.
Kernel (v5.6.7->v5.7.1):
 - Radon v5.7 changes.
 - Rebranded to SecuRadon.
 - Added SecuRadon splash screen.
 - Updated the list of security vulnerabilities.
 - Built using aarch64-linux-android-4.9-android-6.0.1_r81 toolchain. 

[B]20171007[/B]
ROM:
 - ROM security patch level 2017-10-01.
 - Android 6.0.1_r81.
 - Build id MOI10E.
Device:
 - Removed default "+3 headphone/aux boost").
Kernel (v5.6.1->v5.6.7):
 - Kernel security patch level 2017-10-05.

[B]20170922[/B]
ROM:
 - Android 6.0.1_r80.
 - Build id MOB31Z.
 - Synchronized repository.

[B]20170919[/B]
ROM:
 - Added signature spoofing permission capability. It can be enabled in
Settings>Apps>Advanced(gear icon)>App Permissions>Spoof package signature.
Kernel (v5.5.5->v5.6.1):
 - Radon v5.6 changes.
 - Added some missing patches.

[B]20170915[/B]
ROM:
 - ROM security patch level 2017-09-01.
 - Removed updater.
Device:
 - Updated default kernel settings (speaker boost +7, headphone/aux boost +3).
Kernel (v5.3.2->v5.5.5):
 - Kernel security patch level 2017-09-05.
 - Further memory tuning improvement for 2gb users.
 - Fixed "wrong 0.00B values in ram management" issue.
 - Switched to flar2 sound control (supported in kernel adiutor >=0.9.72).
 - Increased maximum charging current from 1500mAh to 2000mAh.
 - Added option for old thermal engine to deal with possible slow charging issues.
 - Increased max brightness.
 - Disabled bcl hotplug.

[B]20170812[/B]
Kernel:
 - Updated to SecureRadon v5.3.2.
 - Added adrenoboost parameter.
 - Tuned adrenoboost.
 - Added display state awareness (adreno idler related).
 - Declared display_on correctly (adreno idler related).
 - Renamed "gaming config" to "performance config".
 - Added a warning regarding possible device damage because of 2400mA charging.
 - Added some security patches. 

[B]20170810[/B]
ROM:
 - 2017-08-05 security patch level.
Device:
 - Updated default kernel settings.
Kernel:
 - Updated to SecureRadon v5.3.1.
 - Based on radon-cm-rebase.
 - Kernel security patch level 2017-08-05.
 - Switched back to sysfs3 sound control.
 - "Not booting when selecting goodix" issue fixed.
 - Some random function related patches.
 - Fixed wrong "case_therm" thermal values. 

[B]20170712[/B]
Rom:
 - Added 2017-07-05 security patch level.
 - Synchronized repository.
Kernel:
 - Added 2017-07-05 security patches. 

[B]20170630[/B]
ROM:
 - Synchronized repository.
Device:
 - Used MIUI stable build "V8.2.4.0.MHOMIDL" fingerprint.
 - Added net_raw to ril daemon services.
 - Added support for top-app cpuset.
 - Set proper CPU variants.
 - Cleaned up kernel cmdline.
 - Synced with f/w native heap values.
 - Enabled HW Acceleration on all aspect.
 - Tweaked dex2oat.
 - Better optimized 32bit blobs.
 - Start qseecomd on post-fs.
 - Added missing ANT+ permission.
 - Enabled 24bit offload.
 - Snap camera improvements.
 - Made 1080p as default video size.
 - Removed real time face beautification.
 - Added  highspeed recording profiles 
   (120fps @ 720p, 60fps  @ 1080p).
 - Disabled fluence on voicerec (Fixes oK google).
 - Disabled mobile data on first boot.
Kernel:
 - Updated security patched radon to 5.1.
 - ARM64: configs: Set CONFIG_HZ to 300.
 - Updated default radon settings (check FAQ).

[B]20170623[/B]
Device:
 - Fixed "greenify shallow hibernation not working" issue introduced in 20170614 build.
 - Set defaullt aux/headphones volume to +7. 

[B]20170619[/B]
Device:
 - Reverted "Tweaked screen (auto)brightness values".
 - Included radon.sh.
Kernel:
 - Updated security patched radon to 5.0. 

[B]20170614[/B]
ROM:
 - Added 2017-06-05 security patch level.
 - Synchronized repository.
Device:
 - Switched to LineageOS 14.1 audio configs.
 - Updated GPS configs.
 - Added VSYNC offsets.
 - Ported: Add VR support.
 - Fixed Wi-Fi Direct/P2P.
 - Enabled Wi-Fi Display.
 - Added miracast support.
 - Tweaked screen (auto)brightness values.
 - Faster app installation (using 6 cores instead of 4).
 - Enabled boot dexpreopt. (faster 1st boot time)
 - Did not make gello (gecko for now, probably jelly in the future).
 - Added 'misc' entry in fstab.qcom .
 - Added KeyDisabler.
 - Built missing IPV6, audio and media packages.
 - Removed auto-power-save mode overlay.
 - Added eMMC Trim/Discard support.
 - Included and updated init.radon.rc.
 - Updated sec_config.
 - Updated BoardConfig.mk
 - Stopped the QC-QMI message spam.
Kernel:
 - Changed the default kernel to security patched radon 4.9.

[B]20170529[/B]
 Device:
 - Revert "Switched to LineageOS 14.1 audio configs".
 Kernel:
 - ARM64: configs: Set CONFIG_HZ to 300

[B]20170525[/B]
 Device:
 - Silenced "qcom powerhal: Failed to acquire lock" logcat spamming message.
 - Updated giflib to 5.1.4.
 Kernel:
 - Fix potential refcount leak in su check

[B]20170524[/B]
 Device:
 - Updated power configs.
 - Enabled some audio features.
 - Enabled BOARD_HAVE_QCOM_FM.
 - Use Snapdragon LLVM toolchain.
 Kernel:
 - Only expose su when daemon is running.

[B]20170519:[/B]
 - Switched to LineageOS 14.1 audio configs.
 - Fixed "wifi not turning on" issue introduced in 20170513 build.

[B]20170505:[/B]
 - Added 2017-05-05 security patch level.
 - Synchronized repository.

[B]20170428:[/B]
 - Lineage trebuchet launcher icon.
 - Synchronized repository.

[B]20170415:[/B]
 - Switched to LineageOS fork of freetype in order to apply a patch that fixes a security issue.

[B]20170411:[/B]
 - android-6.0.1_r79
 - MOB31T
 - Synchronized repository.

[B]20170406:[/B]
 - Added 2017-04-05 security patch level.
 - Fixed "blue blinking screen after mi logo" issue (Thanks Umang96).
 - Synchronized repository.

[B]20170329:[/B]
 - Synchronized repository.

[B]20170323:[/B]
 - Synchronized repository.

[B]20170314:[/B]
 - Unified twrp recovery can now be flashed on kate devices 
  without getting an error.
 - Fixed "-2%" battery percentage decrease  rate issue.
 - Faster device boot.
 - Enabled correct HAL sensor.
 - Fixed a53 cores max frequency.
 - Synchronized repository.

[B]20170310:[/B]
 - Added 2017-03-05 security patch level.
 - Synchronized repository.

[B]20170306:[/B]
 - Added ov16880_f16v01a, ov16880_omida05 and s5k5e8_yx13 camera sensor blobs.
 - Reverted "Add widewine modular DRM support".
 - Synchronized repository.

[B]20170301:[/B]
 - Added s5k5e8_yx13 and s5k3p_f16s01c camera sensors support.
 - Fixed s5k3p3_f3p3man camera sensor support.
 - Added google widevine modular DRM.

[B]20170227:[/B]
 - Synchronized repository.

[B]20170220:[/B]
 - A few kernel fixes.
 - Synchronized repository.

[B]20170214:[/B]
 - Reverted 'Updated device audio configs to the ones from official LineageOS 14.1'.
 - Synchronized repository.

[B]20170213:[/B]
 - Added 2017-02-05 security patch level.
 - Synchronized repository.

[B]20170204:[/B]
 - Updated device audio configs to the ones from official LineageOS 14.1.
 - android-6.0.1_r78
 - Some other minor changes.
 - Synchronized repository.

[B]20170202:[/B]
 - Fixed "same for all" bluetooth address issue.
 - Tweaked autobrightness values.
 - Synchronized repository.

[B]20170127:[/B]
 - Added s5k5e8_z5e8yab front camera sensor missing blobs.
 - Synchronized repository.

[B]20170123:[/B]
 - Fixed headphones hissing sound issue.
 - Synchronized repository.

[B]20170120:[/B]
 - Added missing patches to the kernel so that it complies with 2016-08-05 security patch level.
 - Synchronized repository.

[B]20170118:[/B]
 - Lineage boot animation.
 - Enabled built-in SU.
 - Added missing patches to the kernel so that it complies with 2016-07-05 security patch level.
 - Synchronized repository.

[B]20170113:[/B]
 - Rebranded kernel and device to lineage.
 - Synchronized repository.

[B]20170108:[/B]
 - Added 2017-01-05 security patch level.
 - Synchronized repository.
 
Last edited:

zilan

Senior Member
Sep 9, 2008
814
519
0
Finally for users still using cm13 get latest updates. Thanks dev and will dual sim card works fine on this rom? Because last time using cm13 my sim1 can't detect .

Only on cm14 my dual sim works fine because there is global network preference on cm14 and cm13 doesnt have "global" preference network. Does this rom will have global network type? Can you make sure it dev? Thanks

Ps. My sim card on sim1 only works on global prefered network and only cm14.1 variant rom have it. If cm13 have it i want to test it.
 

Attachments

Last edited:
  • Like
Reactions: tom jp

gismoZ

Senior Member
Dec 1, 2015
443
2,005
0
Finally for users still using cm13 get latest updates. Thanks dev and will dual sim card works fine on this rom? Because last time using cm13 my sim1 can't detect .

Only on cm14 my dual sim works fine because there is global network preference on cm14 and cm13 doesnt have "global" preference network. Does this rom will have global network type? Can you make sure it dev? Thanks

Ps. My sim card on sim1 only works on global prefered network and only cm14.1 variant rom have it. If cm13 have it i want to test it.
Which firmware do you use?
 

Siddk007

Senior Member
Nov 15, 2012
2,870
3,164
203
Bengaluru
Clean Flashed rom on top of xenonhd Nougat rom. Even after flashing strix firmware, network didnt get detected. Restored efs and firmware of miui dev rom. Now everything working fine.
Awesome rom, thanks for keeping cm13 alive in the form of LOS.
Can you give an update with Jan'17 android security patch in coming days?

Sent from my Redmi Note 3 using XDA Labs
 
Last edited:

gismoZ

Senior Member
Dec 1, 2015
443
2,005
0
When on cm 13 im using the strix firmware and now im on cm14 using psy firmware because the strix cm14 firmware re lock bootloader.
Does your lineageos have this type prefered network? Only global network will works for my sim1. Thanks

Ps. Does your lineage support cmte/oms?
TheStrix cm13 firmware is old, use a newer one to see if it fixes your dual sim problems. I don't use dual sim. No, It does not have global network mode. Yes, It does support cmte.
 

zilan

Senior Member
Sep 9, 2008
814
519
0
TheStrix cm13 firmware is old, use a newer one to see if it fixes your dual sim problems. I don't use dual sim. No, It does not have global network mode. Yes, It does support cmte.
I remember i also have try newest cm13 firmware shared by xda member here but it also doesn't support global network.
But strange on N based rom mostly it detect global network. Does it not related on rom?
Which firmware you suggest it?
 

SantaPagla

Senior Member
Oct 13, 2011
58
7
0
Calcutta
See Version Information...

---------- Post added at 08:33 PM ---------- Previous post was at 08:31 PM ----------

What About VOLTE??
See Version Information...

---------- Post added at 09:02 PM ---------- Previous post was at 08:33 PM ----------

I'm currently on a Kenzo with Goodix FP, ZCX TWRP 3.02-X, SuperSU 2.79 and MIUI 8.1.1, patiently waiting for the CM/LOS issues to subside first.

So, for me to install LOS for the first time, are these the appropriate steps?

1. Boot to Recovery.
2. Reset phone.
3. Flash latest firmware ZIP suggested by gismoO (https://www.androidfilehost.com/?fid=673368273298921859)
4. Flash LineageOS 13.0 20170106 ZIP (https://www.androidfilehost.com/?fid=673368273298921688)
5. Flash Goodix fix (no idea which one to install among so many links scattered all over XDA)
6. Reboot.

Can somebody help me with this?

Also, lots of Kenzo CM 13.0 users complained over camera issues. Are they still there?
It would be good to have a bug list.

Great job @gismoO and thanks in advance.