Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0d8d105e authored by Xiaoyong Zhou's avatar Xiaoyong Zhou Committed by android-build-merger
Browse files

Merge "Enable fsverity signature checking"

am: aaee497d

Change-Id: I11f83f7bcf42b9d35a9527b42b3ed0b0c7307a27
parents 5481e3ae aaee497d
Loading
Loading
Loading
Loading
+2 −0
Original line number Diff line number Diff line
@@ -424,6 +424,8 @@ on post-fs-data
    exec -- /system/bin/mini-keyctl dadd asymmetric vendor_cert /vendor/etc/security/cacerts_fsverity .fs-verity
    # Prevent future key links to fsverity keyring
    exec -- /system/bin/mini-keyctl restrict_keyring .fs-verity
    # Enforce fsverity signature checking
    write /proc/sys/fs/verity/require_signatures 1

    # Make sure that apexd is started in the default namespace
    enter_default_mount_ns