own-your-glass

From the project's README ("Quick start"):

Once the TV is rooted (Homebrew Channel installed, its SSH server on; see Rooting your TV), one line installs the app:

ssh root@<tv-ip> 'curl -fsSL https://raw.githubusercontent.com/JulioFerrero/own-your-glass/main/scripts/install-app.sh | sh'

The TV downloads the latest release itself, Homebrew Channel checks its sha256 and installs it, and the app opens. From there it is all the remote: press Apply hardening. Any SSH client works, a phone included, and the same line updates the app later. It is not in Homebrew Channel's own store yet.

Older webOS (testing mode). Apply hardening only runs on webOS 10 and newer, the only version this has been tested on; on anything older it refuses. To test it on an older TV anyway, add OYGFORCEUNSUPPORTED=1 before sh:

ssh root@<tv-ip> 'curl -fsSL https://raw.githubusercontent.com/JulioFerrero/own-your-glass/main/scripts/install-app.sh | OYGFORCEUNSUPPORTED=1 sh'

Apply hardening then runs on that TV (the status board shows "testing mode"). Nobody has run it on webOS 4–9 yet, so use a TV you can afford to reset, and keep the console's output: it is what tells us what differs. Undo hardening works on any firmware. The same line with OYGFORCEUNSUPPORTED=0 turns testing mode off.

Prefer the command line? Install (on the TV) below covers install.sh, oyg harden and the full flag set.

---

Read the full instructions

From the project's README ("Control panel (the TV app)"):

app/ is a webOS app that puts the toolkit on the remote. It carries its own copy of the toolkit, so installing the app is all a TV needs. The screenshot at the top is the panel on a real TV.

• Status comes from scripts/status-fast.sh, one row per subsystem. The focused row's individual checks show underneath.
• Apply hardening installs the bundled toolkit to /var/lib/own-your-glass and runs oyg harden with the network flags on (OYGNETWORKBLOCK, OYGNETWORKSTRICT, OYGNETWORKIPBLOCK, OYGDNSOVERRIDE, OYGDNSRESOLVER, OYGDNSVARIANTC), OYGLAUNCHER=1 (LG's ad and promo settings off, pushed apps hidden) and OYGLAUNCHERTRIM=1 (the Clean home layout). Variant C restarts ConnMan once, so Wi-Fi drops for 7–30 s; the console says when the internet is back. It also turns HbbTV and the SSAP phone remote off and stops the telemetry daemons listed above. That is stricter than a plain oyg harden; see the opt-in flags for what each one can break.
• Check again re-reads the status. Undo hardening runs oyg restore; what it undoes stays undone after a reboot.
• DNS blocking — Turn on / Turn off starts or stops the on-device sinkhole (scripts/dns.sh), and the choice holds across reboots. Turn on also brings Variant C back when Apply put it on.
• Home screen — Clean / Stock switches the home to the wallpaper layout shown at the top (OYGLAUNCHERTRIM=1) or puts LG's layout back (OYGLAUNCHERTRIM=0). Clean is kept at …

Read the full instructions