[Rom] Updated February 9: AOSP Jaguar Honami OFFICIAL-HYPERTOOL 5.4

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
This is the Official Jaguar rom for Honami, which is based on AOSP with some flavors from Slim and Dirtyunicorn. The main difference from other roms is the emphasis on security and multiple features. With that in mind , let's see what Jaguar has to offer:

1. Hardened Kernel, modified M5 built with UBERTC 6.0; hardened rom built with HYPERTOOL 5.4
2. CPU overclocked to 2572 and GPU to 600
3. All ciphers enabled in kernel instead of just a few
4. Hardened/Fortified Bionic and Libs
5. Fstack protection strong to resist buffer overflows
6. Many System apps and processes are made read-only, to reduce elevation of privilege
7. Selinux replaced with Tomoyo and Yam security
8. Disc encryption, keymaster to 256 bit AES instead of 128
9. Latest TWRP with working brightness and ability to decrypt Data
10. Random number generation mixed hardware/software, as recommended by Linus Torwalds
11. Options to randomize host on every boot
12. Option to have a separate password for lock screen and boot
13. Qualcomm's Time Services disabled due to leaking on early boot. Instead, Timekeep is ported from Nougat (time set locally without Internet or GSM signal)
14. WIFI Background Scanning disabled to prevent leaking
15. Internet disabled for both WIFI and Data until Afwall is set and activiated (Afwall included in download, install as regular app)
16. The phone is VOLTE ready and you have all network options available in Cell menu (not just LTE/WCDMA/GSM)
17. GRsecurity features, such as Sidechannel implemented
18. Some Pax Security Features
19. Option to deny USB connection: denied always; denied when locked; and allowed always
20. Hardened webview with Google and other "interesting" IPs removed
21. Prevention of bruteforcing screen pin: the phone will reboot upon 3 unsuccessful attempts
22. Perfect_Event_Paranoid ported from Grsecurity: now third party apps can't use other apps including system to elevate privileges
23. Camera hardware button works to focus, take pictures and start video recording
24. Option to disable writing to Tombstones (a lot of private info is dumped there if there is a crash)
25. Option to disable continuing writing of logcat
26. Option to disable device cameras: back; front, both or none
27. Always latest Google Security Patches
28. Always latest Code Aurora Security Patches
29. Changes ported directly from Google Android Gerrit, so most of those in MM and even N are in this rom
30. About 80% of kernel changes are ported into Jaguar kernel from 3.10 and 3.18 (not Sony AOSP 3.10, but Linux/Google/Code Aurora one)
31. Rom is odexed to significantly increase boot speed (under 30 seconds) and application start
32. Many more security features ported from Linux and Copperhead OS
33. Sony Timekeep
34. DNS Encryption, as well as the choice of multiple DNS providers


Other features include: Stereo Sound; Layers Theme Engine; Native Call Recording with interface integrated in Dialer with no restrictions; Privacy Guard; Native Wakelock Blocker; Native Black List; Global Menu; Slim Recents; Traffic Indicators; Advanced Reboot; Slim Pie; CPU Info on Screen; Ram Bar in Recents; Open source Superuser included and integrated in Settings; True Offline Charging with Screen Off; Kernel Adiutor included (unzip and install as a normal app) and integrated in Settings; FM Radio and Recording plus more

Things users need to know to have smooth experience:. These are not bugs, but rather an explanation of some features

1. If you want to do data encryption, keep in mind that unlike Android, Jaguar uses 256 bit encryption. If you were encrypted on other roms, you won't be able to decrypt. So, wipe encryption and then re-encrypt on Jaguar. Also, keep in mind that if you ever did factory reset on official TWRP 3+ for honami, your data partition is screwed and have to be resized to enable encryption. This has nothing to do with the rom, but rather with the official TWRP itself. Fastboot my unofficial TWRP 3.0.2, which, by the way has working brightness, as well as ability to decrypt and mount data

2. Jaguar contains a script running on early boot, which cuts the internet access to both WIFI and Data until Afwall is running. This is done to prevent leaking, as well as having all your internet traffic routed through some interesting number of servers, including this IP: 26.147.196.22. So, install Afwall and activate it, otherwise, no Internet for you

3. If your system language is different from English and you want to make changes in Phone/Cell Network settings, switch to English first, make the changes and then return to your language. The changes you made will hold. If you try to make the changes in your language, you will have com.android.phone crash. Localization takes time and is virtually impossible to implement in Jaguar, which is a one-person-rom

4. Qcom Time Services daemon is disabled to prevent leaking. That means that you have to set Time/Zone to automatic to get it directly from your carrier. Otherwise, you won't have the correct time on reboot. Forget it. Sony TimeKeep is now setting the correct time on reboot and without the Internet, even in Airplane mode

5. Dnscrypt: in Settings/Security you have a new feature allowing the use of different dns providers (all encrypted), instead of your provider's default one. In Afwall, you must allow access to 'apps running as root'. Otherwise, no internet

6. Supersu is no longer bundled with the rom. Activate Developer settings and enable builtin root there. Open source Superuser is now included. Activate root choices within the app

7. If you use Gapps, they must be flashed right after the rom and before reboot. If you reboot even once, you will have multiple Gapps f/c due to incorrect permissions


Download: All updates and change logs are in Post #3 now

Instructions:

YOU MUST HAVE LATEST STOCK LP 5.1.1 FLASHED ONCE ON YOUR DEVICE. Otherwise, you may experience hardware (mainly Gps problems). If after the official LP 5.1.1, you downgraded to any other official stock version, you must reflash stock LP 5.1.1

1. Have TWRP (fastboot my unofficial version), unlocked bootloader and root.
2. In TWRP, wipe data/factory reset, then wipe System/Data/Cache/Dalvik
3. Flash the rom
4. If you use xposed, flash the latest installer. Xposed no longer works and will never work with roms that incorporate Nougat security features. Xposed used a security hole that was closed by Google. Bye bye Xposed...
5. If you want Gapps, flash them before any reboot. Otherwise, you will have multiple problems due to permissions.
6. Reboot, install Afwall and Kernel Adiutor as normal apps; activate Afwall to have Internet
7. Enjoy the rom, say thank you, donate or do both :)


Warning: If your device and/or anyone in the immediate vicinity dies, don't blame me: it is all China and Russia's fault. :laugh:

Credit: CM, AOSP, Slimroms, DU, Copperhead OS, Myself5 (kernel)

UPDATED KERNEL SOURCE: https://forum.xda-developers.com/devdb/project/dl/?id=23107 . Don't flash. This is not kernel, but rather sources to compile kernel

Kernel Sources: https://github.com/AOSP-Argon/android_kernel_sony_msm8974

XDA:DevDB Information
Jaguar Rom , ROM for the Sony Xperia Z1

Contributors
optimumpro
ROM OS Version: 5.1.x Lollipop
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Unlocked Bootloader
Based On: AOSP, Slimroms, DU

Version Information
Status: Stable
Current Stable Version: 6.0
Stable Release Date: 2016-02-09

Created 2015-08-29
Last Updated 2017-02-09
 
Last edited:

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
Update on Further developemnt

February 16. I broke my Z1 screen again and I am not in the mood for after market screens. And I am sick and tired of Sony crappy treatment of development community.

I am now looking at Lenovo Zuk Z2 or Z2 pro. Both excellent phones with the latest CPU and made out of metal and glass by Motorola which they bought from Google a couple of years ago. Zuk is friendly to developers and their blobs don't dumb down camera and they don't seek to "unify" bugs for all their devices. I no longer wish to support a fat bastard corporation that can't make a good phone, but thinks that just by putting their logo on the phone would make it worth $700.

RE Jaguar. I will continue to maintain Jaguar mainly with security patches... for a while, but my main work will be concentrated on Zuk. There is a lot of work to be done cleaning Android N and implementing security and other features from Jaguar...
 

Attachments

Last edited:

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
This is where you get the latest update

March 21. New release:

1. March Security patches
2. New Superuser
3. Updated kernel


Download: https://forum.xda-developers.com/devdb/project/dl/?id=23814
____________________________________________________________________________
February 9. New release:

1. February Security patches
2. DNS_Crypt (in settings/security)
3. Seccomp (secure computing implemented in kernel)
4. Open Source Superuser integrated
5. Silent SMS notification enabled
6. 1440p profile in camcorder added

If you enable Dnscrypt and you use Afwall, allow internet to apps running as root...

If you prefer closed source Supersu, just flash the zip...


Download: https://forum.xda-developers.com/devdb/project/dl/?id=23069
____________________________________________________
January 20. Good News! Time service completely fixed. Qcom's crappy and creepy service taken out and replaced with Sony open source TimeKeep ported from MM/N. No connection to the internet needed. Everything is done locally on the device. TWRP has also been modified to set the correct time on boot.

The wayTimeKeep works is that before the shut down, it saves the properly set time and on reboot restores it (after the down time calculation). TWRP also reads that value on boot. For those who have encrypted data: the correct time in TWRP will be set after you enter boot password and data is decrypted and mounted.


Download Rom: https://forum.xda-developers.com/devdb/project/dl/?id=22743

Download TWRP: https://forum.xda-developers.com/devdb/project/dl/?id=22742

___________________________________________________________________________________
January 5. New release with January security patches and more. Also back is qcom time domain.

Download: https://forum.xda-developers.com/devdb/project/dl/?id=22428

You may flash dirty if on a previous release. Otherwise, fresh install (read directions)

P.S. This build included an experimental kernel. So, if you have any problems, flash the stable version in fastboot (unzip the file first): https://forum.xda-developers.com/attachment.php?attachmentid=3995799&d=1483894575
__________________________________________________________________
December 13. Stereo Sound is here. This is based on Dontbelive mode, but it is just clean stereo sound (ear piece and loud speaker), no bass or any other ridiculous "improvements" that do nothing, but distort. And as a result, just a clear stereo sound for games, videos, songs etc...

Just flash the zip in TWRP and reboot. Remember, this is not a rom, but a stereo-sound mode to flash on top of Jaguar...

After installing this, you have to make one call to recalibrate the sound. Otherwise, you may have distortions in the ear piece....

Download: http://forum.xda-developers.com/devdb/project/dl/?id=22080

Credit to Dontbelive...
___________________________________________________________________________________
December 9: New release to include:

1. December Security Patches
2. Signature spoofing feature (cherry-picked from Omnirom)
3. USSD should work now


Download: http://forum.xda-developers.com/devdb/project/dl/?id=21987

__________________________________________________________________________________
November 16. Kernel with DirtyCow fix. Download and flash in recovery. This is not for fastboot.

Download: http://forum.xda-developers.com/devdb/project/dl/?id=21563
___________________________________________________________________
November 10. Rom updated to include November Security Patches+. I have also removed Supersu, as the rom has a built-in root manager. However, if anyone wants to install Supersu, you can easily flash it in recovery

Download: http://forum.xda-developers.com/devdb/project/dl/?id=21427
________________________________________________________________________________
October 10. Kernel-no-overclock.

Unzip and flash in fastboot.

Download: http://forum.xda-developers.com/devdb/project/dl/?id=20848
_________________________________________________________________________________
October 9. Updated Kernel, which includes:

1. Updated higher frequency voltage
2. Improved Prima/Wifi driver

Your CPU variant may require voltage adjustment in Kernel Adiutor for new frequencies. Try to give a load for CPU and if you have freezing or random reboots (which you shouldn't), adjust higher 3 by +10/20. This latest kernel achieves 40000+ antutu score with Ondemandplus with temperature rising to about 58 at the highest load...

Note that some CPU/GPU variants just won't go to 2803 for CPU or 600 for GPU

Instructions: Unzip boot.img and flash in fastboot: fastboot flash boot boot.img or use various apps to install without fastboot

Download: http://forum.xda-developers.com/devdb/project/dl/?id=20838
__________________________________________________________________________________
October 8. Rotating Home Screen: if you want your home screen rotate like on a tablet, flash the attached file in recovery and reboot. So, when you set display to rotate, home screen will be included
__________________________________________________________________________________
October 5. New release:

1. Kernel overclocked to 2803: experimental, I have used it for 10 days without problems
2. October security patches from Google and Code Aurora
3. Over 80 commits from Google Master Gerrit which included changes to bionic, art, frameworks and system
4. Updated Afwall
5. Maybe more

This rom is now about 40% Nougat. One of the side effects: Xposed framework no longer works, but getting rid of it and instead using Privacy Guard is almost as good. Don't forget, Xposed is an exploit, which provides hooks for good and bad things.


Rom Download: http://forum.xda-developers.com/devdb/project/dl/?id=20788

Afwall/Kernel Adiutor Download: http://forum.xda-developers.com/devdb/project/dl/?id=20787

You can flash dirty if on a previous release
_________________________________________________________________________________
September 8. Rom updated to include:

1. September Google security patches
2. Latest Code Aurora patches https://www.codeaurora.org/projects/security-advisories
3. MPdecision is permanently disabled due to interfering with other hotplug and CPU frequencies. Default is MSMdecision, but you can pick several others in Kernel Adiutor
4. CPU overclock and underclock removed: no benefit whatsoever
5. More hardening ported from 3.18, 4.1 and 4.4 kernels
: https://android-review.googlesource.com/#/q/hardened,25 You won't find those in any rom custom or stock. This is from 3.18-4.4 kernels and it has nothing to do with Sony AOSP. :rolleyes: That's why it works...
6. About 70-80 commits from Android Master Branch. Folks. This is no longer a lollipop rom
7. PXN security feature implemented, which takes advantage of special instructions on ARMv7 to prevent unprivileged execution. See here: https://android-review.googlesource.com/#/c/265892/
8. Further integration of VOLTE
9. Kernel Adiutor: author has decided to go with Mobile Ads/Adview/Adbanner. So these were removed...
10. Camera: improvements to camera wrapper (missing entries), as well as some modifications in /frameworks/av/camera, so, you have a sharper picture. See photo attached, although, XDA reduces pictures... . This was taken with Open Camera. Not the crappy Sony Open Camera, but the fully open source one, with many features including several focusing modes: https://f-droid.org/repository/browse/?fdfilter=open+camera&fdid=net.sourceforge.opencamera. Tell me bootloader locked stock camera is better. It is not...
11. Maybe more...


WARNING: you need to do one thing after flashing the rom: flash the latest stock baseband. BASEBAND ONLY. If you don't, you will only have LTE: no H+/H/2G. This is a one-time procedure and is due to Volte implementation. You can either use FlashTool to flash stock baseband or a Partition Backup App (from Googleplay or elsewhere) to backup and restore your modems. With FlashTool, first flash the rom, then reboot, then flash the latest baseband. With Partition Backup, first, backup your modems, then flash the rom, then restore modems and reboot. You have been warned. I don't want to hear cries: where is my 3G!

Download Rom: http://forum.xda-developers.com/devdb/project/dl/?id=20287

Download Afwall/Kernel Adiutor: http://forum.xda-developers.com/devdb/project/dl/?id=20282

You may flash dirty if on a previous release. Otherwise, clean flash...
 

Attachments

Last edited:

danny19901

Senior Member
Nov 4, 2010
2,612
858
0
Stockton-On-Tees
Downloaded and flashed so far great ROM but 1st issue I noticed I believe data is turned off at ROM start up so setting up Google etc... Is hard without WiFi other than that ultra smooth and really fast great work. @optimumpro I don't suppose you know how to get OK Google everywhere to work do you on all ROMs I have tried its never there
Hope to see FAB in recents in next build if possible though as the remove recents is kinda small and the hover notifications kind of cover over it
Sent from my Xperia Z1 using Tapatalk
 
Last edited:
  • Like
Reactions: agha_jo0n

matcho13579

Senior Member
Mar 23, 2011
683
228
73
Is there still a bug when you turn Bluetooth off and on and it changes the Bluetooth MAC address? (as well as the same WiFi MAC for every device)
 

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
Downloaded and flashed so far great ROM but 1st issue I noticed I believe data is turned off at ROM start up so setting up Google etc... Is hard without WiFi other than that ultra smooth and really fast great work. @optimumpro I don't suppose you know how to get OK Google everywhere to work do you on all ROMs I have tried its never there
Hope to see FAB in recents in next build if possible though as the remove recents is kinda small and the hover notifications kind of cover over it
Sent from my Xperia Z1 using Tapatalk
Data is off by default on first boot only to prevent the phone from connecting before you set it up (firewall etc.). Just turn it on and it will stay on despite reboots. Ok Google? Oh, that's too complicated for me. :)
 

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
Totally agree with you.

I was also able to set my WiFi MAC without any problems.

The layers thing is also a very good alternative.

My Z1 is now really hot, I hope it will calm down after some days of use.
@optimumpro: Keep on with this good mix [emoji3]
Tweak cpu voltages and governors. You should not have any overheating. Also, don't put any stress on cpu while the phone is charging. Phones are not designed to be used while on a charger: they only get current from the battery, unlike laptops, so, when you are on charger and using the phone, you stress the battery and cpu.
 
  • Like
Reactions: schickel

danny19901

Senior Member
Nov 4, 2010
2,612
858
0
Stockton-On-Tees
Does everything work with this rom? modem, camera and recharge while the phone is off?
Yes everything seems to be working great modem, camera etc...

Prime Red Dark Layers Theme is really nice I tried Scarlett but has Playstore changelog no text bug




Oh I have xposed installed also for flat style status bar, always correct, force expanded notifications this ROM is by far the best ultra quick

1 big question just noticed how come colour picker tint overlay is still in the dialer ? I thought this was removed in 5.1.1 ? As you can see with the red overlay (This is my very Old Number)


Sent from my Z1 using Tapatalk
 
Last edited:

caki25

Senior Member
Oct 16, 2008
396
97
0
Kosice
I noticed that when I get a call, the phone has to switch back to GSM signal. If I don't have GSM listed in the preferred network types, I could not be reached on the phone - goes straight into a busy tone... Anybody else experienced this?
 

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
I noticed that when I get a call, the phone has to switch back to GSM signal. If I don't have GSM listed in the preferred network types, I could not be reached on the phone - goes straight into a busy tone... Anybody else experienced this?
This is a normal behavior. Your phone is a GSM phone. Now, if your carrier provides voice over 3g, then your phone will swith to 3g/H+ from LTE. If you have Volte (voice over LTE), it will stay on LTE. In most of the world there is no Volte yet, so, if your data is LTE, then when you get a call, the phone switches to 3g/H+. If your carrier does not provide calls over 3g (2g only) and you are on WCDMA/LTE, then you won't receive any calls. In that case you should switch to GSM/WCDMA/LTE.

Again, as I have already said, that's the behavior on all roms. Other roms just don't have the options in cell menu that this rom has and changing networks in phone test menue does not stick on reboot. So, you have to know what you are doing...
 
Last edited:

caki25

Senior Member
Oct 16, 2008
396
97
0
Kosice
This is a normal behavior. Your phone is a GSM phone. Now, if your carrier provides voice over 3g, then your phone will swith to 3g/H+ from LTE. If you have Volte (voice over LTE), it will stay on LTE. In most of the world there is no Volte yet, so, if your data is LTE, then when you get a call, the phone switches to 3g/H+. If your carrier does not provide calls over 3g (2g only) and you are on WCDMA/LTE, then you won't receive any calls. In that case you should switch to GSM/WCDMA/LTE.
I guess I managed to jump too hastily again ... :) it does make sense of course, and I should have noticed that before. The default setting threw me off I guess, since that was without GSM and when my boss tried to reach me, he just got a busy tone :) anyhow, thank you so much for the explanation and this wonderful ROM. I just can't move away from Layers anymore :)
 

optimumpro

Senior Member
Jan 18, 2013
6,274
13,636
253
I guess I managed to jump too hastily again ... :) it does make sense of course, and I should have noticed that before. The default setting threw me off I guess, since that was without GSM and when my boss tried to reach me, he just got a busy tone :) anyhow, thank you so much for the explanation and this wonderful ROM. I just can't move away from Layers anymore :)
"Default setting". That's my fault, I shouldn't have assumed that everyone has voice over 3g. I will change this in the next release, but your selection GSM/WCDMA/LTE should stick after reboot.
 

dape16

Senior Member
Jun 20, 2006
487
109
63
Thanks for a great ROM! Will this be your main ROM from now on?

Do you recommend to use the kernel defaults or do you have other settings for voltage, governor etc. that you recommend?
 

kentexcitebot

Senior Member
Mar 30, 2014
575
481
0
Moorpark
This is a really good ROM! Good job @optimumpro! :good:

The feature I really miss from your unofficial DU ROM is the ability to block System Wakelocks. I have serious wakelocks on my phone due to Play services and I don't like Xposed too much (compromises security and drains battery).

Could you add this feature? Thanks!
 
Last edited:

danny19901

Senior Member
Nov 4, 2010
2,612
858
0
Stockton-On-Tees
OK starting to get Random Reboots but I think it's my kernel settings as I had no issues at all except when screen waked up wouldn't let me unlock for a little while so I altered few things fixed that problem now I get random reboots :(

Sent from my Z1 using Tapatalk