Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f0ac9943 authored by Xiaoyong Zhou's avatar Xiaoyong Zhou Committed by android-build-merger
Browse files

Merge "Enable fsverity signature checking" am: aaee497d

am: 0d8d105e

Change-Id: I01ddf98d6d66f6e9c2490b919059c67432f33878
parents 315a0513 0d8d105e
Loading
Loading
Loading
Loading
+2 −0
Original line number Diff line number Diff line
@@ -424,6 +424,8 @@ on post-fs-data
    exec -- /system/bin/mini-keyctl dadd asymmetric vendor_cert /vendor/etc/security/cacerts_fsverity .fs-verity
    # Prevent future key links to fsverity keyring
    exec -- /system/bin/mini-keyctl restrict_keyring .fs-verity
    # Enforce fsverity signature checking
    write /proc/sys/fs/verity/require_signatures 1

    # Make sure that apexd is started in the default namespace
    enter_default_mount_ns