Keeping your port secure
One of Omni's goal is to bring the best security to your devices. Besides the changes we can do at framework-level, there is a bunch of changes needed in device trees/kernels that we cannot do automatically.
Please make sure that your device trees and kernels follows the indications here.
Check your init permissions
Make sure your init.*.rc files don't set unnecessary permissions. Compare them against a stock ROM. Nothing should EVER have '777'.
Please make sure your kernels have the following security patches from mainline kernel: