Commit 747eb019 authored Oct 20, 2023 by Eric Biggers

Make fix_unlocked_device_required_keys a build-time flag

This flag will need to be accessed from keystore2, which is started
before the DeviceConfig-based flag infrastructure is available.  Also,
LockSettingsService in system_server will need to vary its start-up
behavior depending on this flag, so toggling this flag at runtime won't
work properly anyway (unless the device is immediately rebooted).

Bug: 296464083
Test: build
Change-Id: I22327798e0fe804144bbedb3e57f57b60b85e72a

parent 89aef178

core/java/android/security/flags.aconfig

+1 −0

Original line number	Diff line number	Diff line
		@@ -12,4 +12,5 @@ flag {
		namespace: "hardware_backed_security"
		description: "Fix bugs in behavior of UnlockedDeviceRequired keystore keys"
		bug: "296464083"
		is_fixed_read_only: true
		}