Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit abd7879a authored by Eric Biggers's avatar Eric Biggers Committed by Alistair Delva
Browse files

ANDROID: cuttlefish_defconfig: enable fs-verity 



fs-verity will be used for APK verification in R.

Bug: 142494008
Change-Id: I51626da9a9975d337c44096f8443c3713dfcd6eb
Signed-off-by: default avatarEric Biggers <ebiggers@google.com>
parent 20243f80

arch/arm64/configs/cuttlefish_defconfig

+2 −0
Original line number Diff line number Diff line
@@ -420,6 +420,8 @@ CONFIG_EXT4_ENCRYPTION=y 
CONFIG_F2FS_FS=y

CONFIG_F2FS_FS_SECURITY=y

CONFIG_F2FS_FS_ENCRYPTION=y

CONFIG_FS_VERITY=y

CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y

# CONFIG_DNOTIFY is not set

CONFIG_QUOTA=y

CONFIG_QFMT_V2=y

arch/x86/configs/x86_64_cuttlefish_defconfig

+2 −5
Original line number Diff line number Diff line
@@ -439,6 +439,8 @@ CONFIG_EXT4_ENCRYPTION=y 
CONFIG_F2FS_FS=y

CONFIG_F2FS_FS_SECURITY=y

CONFIG_F2FS_FS_ENCRYPTION=y

CONFIG_FS_VERITY=y

CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y

CONFIG_QUOTA=y

CONFIG_QUOTA_NETLINK_INTERFACE=y

# CONFIG_PRINT_QUOTA_WARNING is not set
@@ -487,15 +489,10 @@ CONFIG_SECURITY_PATH=y 
CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1

CONFIG_CRYPTO_RSA=y

# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set

CONFIG_CRYPTO_ADIANTUM=y

CONFIG_CRYPTO_AES_NI_INTEL=y

CONFIG_CRYPTO_LZ4=y

CONFIG_CRYPTO_ZSTD=y

CONFIG_CRYPTO_DEV_VIRTIO=y

CONFIG_ASYMMETRIC_KEY_TYPE=y

CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y

CONFIG_X509_CERTIFICATE_PARSER=y

CONFIG_SYSTEM_TRUSTED_KEYRING=y

CONFIG_SYSTEM_TRUSTED_KEYS="verity_dev_keys.x509"