Commit 0db6e921 authored May 01, 2019 by Anton Hansson

Don't sign auto-generated RROs with platform cert

Preinstalled overlays needn't be signed with the same cert
as the package it overlays, simply being preinstalled is
enough. Sign with the default cert instead for now, which
provides fewer special privileges.

Bug: 129373833
Test: internal overlay test
Change-Id: Ie18f7ff749e3f079600f74203664bcb6d11f9d6a

parent a2488b7d

core/generate_enforce_rro.mk

+0 −1

Original line number	Diff line number	Diff line
		@@ -34,7 +34,6 @@ ifeq ($(enforce_rro_use_res_lib),true)
		endif

		LOCAL_FULL_MANIFEST_FILE := $(rro_android_manifest_file)
		LOCAL_CERTIFICATE := platform

		LOCAL_AAPT_FLAGS += --auto-add-overlay
		LOCAL_RESOURCE_DIR := $(enforce_rro_source_overlays)