Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit be515254 authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "Do not restrict .fs-verity keyring in debuggable build"

parents 55ba959c 851026d5
Loading
Loading
Loading
Loading
+6 −3
Original line number Diff line number Diff line
@@ -24,6 +24,9 @@ for cert in /product/etc/security/fsverity/*.der; do
    log -p e -t fsverity_init "Failed to load $cert"
done

DEBUGGABLE=$(getprop ro.debuggable)
if [ $DEBUGGABLE != "1" ]; then
  # Prevent future key links to .fs-verity keyring
  /system/bin/mini-keyctl restrict_keyring .fs-verity ||
    log -p e -t fsverity_init "Failed to restrict .fs-verity keyring"
fi