[Galaxy Tab S2 Android Development] MSe1969:
This thread is dedicated to provide hardened Lineage-OS 18.1 builds with microG included for the Samsung Galaxy Tab S2 9.7 LTE (SM-T815) with current security patches.

Download here

Features of this ROM​

Pre-installed microG like LineageOS for microG project

Pre-installed AuroraStore, AuroraDroid and AuroraServices

OTA Support

eSpeakTTS engine

Additional security hardening features listed below:

Cloudflare as default DNS (instead of Google)

Privacy-preferred default settings

Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)

Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)

Firewall UI (under Trust)

Increased max. password length of 64

No submission of IMSI/phone number to Google when GPS is in use

Default hosts file with many blocked ad/tracking sites

Privacy-enhanced Mulch System Webview

Extra control of sensor access for additionally installed user apps (Special access under app permissions)

Kernel kept up to date using DivestOS CVE patcher

Option to only use fingerprint unlock for apps and not for the device

Optional timeout for Bluetooth and WLAN connections

Per connection WiFi randomization option

Enforcing SELinux

Current release levels​

Custom build release: 2024-07-01

Security string: 2024-02-05

AOSP tag: 11.0.0_r46

Mulch System Webview: M126

Source-code and build instructions​

Kernel: https://github.com/lin18-microg/android_kernel_samsung_universal5433/tree/lin-18.1-mse

Build manifest: https://github.com/lin18-microg/local_manifests/tree/lin-18.1-microG

Installation Instructions​

YOU ARE RESPONSIBLE SOLELY YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE !!!

Please note - I won't explain any single aspect (e.g. how to install 'adb' on your PC or troubleshoot USB connectivity issues under Windows). Search the net and consult the search engine of your choice or look here in XDA, there is plenty of information available.

Pre-Requisites​

If you come from Samsung Stock ROM, make sure to update to the latest offered software version.

You must be (at least) on Android 6! If you have a device still with Android 5, search the net on how to obtain the most recent stock ROM first

Understand how to bring your device into download mode: With the device powered off, press [Home]+[Vol-Down]+[Power] keys

Have heimdall and adb installed on your PC and make sure, you can connect via USB to your device in download mode and via adb

Please read at least once through the LineageOS install instructions to obtain an understanding what needs to be done

Download the most current .ZIP file of the ROM

Make a backup, as you will loose ALL data, including the data stored in Internal memory

Instead of 'sideloading', you can also place the .ZIP file of the ROM onto an SD card and insert the SDcard into the tablet

Install TWRP recovery​

Follow the LineageOS install instructions

Additional important info: After flashing TWRP, to get from download mode into TWRP recovery, you need to first press press [Home]+[Vol-Down]+[Power] until the screen turns black, and then immediately press [Home]+[Vol-Up]+[Power] (some finger coordination needed) - hold the buttons, until the TWRP screen appears

Advanced Wipe​

ONLY perform the steps described here, if you come from Stock ROM or a different Custom ROM!

You do not need to wipe anything if you manually update my ROM (which normally would not be necessary, as updates are distributed via the LineageOS Updater app)

Please note, that this builds is

signed with an own key

. YOU.CANNOT.FLASH.THIS.ROM.OVER.ANOTHER.BUILD - full stop!

In TWRP, tap Wipe, then Advanced Wipe, then choose Format data

Return to the previous menu and tap Advanced Wipe, then select the Cache, Dalvik and System partitions and then swipe to wipe

Install ROM​

You can either install the ROM via sideloading as described in the LineageOS installation instructions or install from the SD card. If you want to install from the SD card, choose "Install" from the TWRP main menu. A file manager appears to let you navigate to your SD card (path /external_sd), you need to select the external SD card as source first. Choose the .ZIP file of our ROM and swipe to flash.

(If you manually update from a previous version of my ROM, you don't need to perform a wipe.) If you come from a different ROM (or stock firmware), make sure that you have performed the Wipe steps above. When finished flashing, return to the main menu, choose "Reboot" and then "System", which will cause your phone to boot into Lineage OS 18.1.

DO NOT

flash Gapps!

This ROM comes with pre-installed microG. So

don't

attempt to flash any Gapps! If you are convinced, that you can't live without Google apps, this ROM isn't for you.

Gesture navigation​

The T815 device has hardware keys for navigation, hence the soft task bar is disabled, which means, that you cannot switch by default to the "gesture navigation". If you wish to activate gesture navigation, please download and use this flashable ZIP. When flashed (in TWRP), it will add a property to enable the soft task bar. After reboot, you will see next to the hardware keys also a soft bar with the three navigation buttons. Now, you can switch to the gesture navigation in the settings.

Want to get rid of this feature again? Delete the file /system/addon.d/63-tbprop.sh (from TWRP or via adb root) and flash the ROM once again.

Why no Android 12 or 13 / LineageOS 19 or 20 build ?​

The answer can be found here: https://lineageos.org/Changelog-26/ (section "Let’s talk about legacy devices…").

There exists a set of patches to "carve out" the eBPF packet filtering, which then would allow to build LineageOS 20, however - I consider the firewall feature a very important feature of my build.

Bug reports:​

If you have a problem, please provide as much relevant details as possible and the build date of the ROM, and

try to get log

as described here

Please note that I can't and won't support issues with builds using a different kernel or Xposed. Same applies to Magisk - feel free to use and ask, but I can't help with Magisk-specific issues. In regards to microG, I will try my best to help when it is related to this ROM (as I use it myself), but any questions of the type "the YXZ-app can't do <some sort of fancy abc Google functionality> properly" are better asked in the respective microG forums.

Credits​

AOSP project

LineageOS project

microG project

Graphene OS project

WhyOrean (Aurora)

SkewedZeppelin (CVE patcher)

Special thanks to below devs (in alphabetical order) who have laid the foundation (device configs, SELinux work, vendor blobs, kernel), which I could use to provide the build for the SM-T815 device:

ananjaser1211

bluess57

metterschling

MrBrause

retiredtab

ripee