diff options
| author | John Stultz <john.stultz@linaro.org> | 2021-07-27 04:34:04 +0000 |
|---|---|---|
| committer | John Stultz <john.stultz@linaro.org> | 2021-07-27 04:35:44 +0000 |
| commit | 03c11dfce22a389404b492ed9475adc3441774dc (patch) | |
| tree | 0a47edba4a3ab2de40bb1ba2abab2b9031fbc5fe /hikey/init.hikey.rc | |
| parent | aa4874ddc8cbf666b5c6a8d7e03fa2d237066bb6 (diff) | |
| download | hikey-03c11dfce22a389404b492ed9475adc3441774dc.tar.gz | |
HiKey960: Enable metadata encryption
This fully enables metadata encryption on hikey960 by following
the instructions here:
https://source.android.com/security/encryption/metadata?hl=en
Mostly just adding --early/--late mountall arguments in the
init.rc and the "latemount" and
"keydirectory=/metadata/vold/metadata_encryption" options to the
userdata fstab line.
Note: You will likely need to flash new userdata (and possibly
reflash metadata as well) after applying this. Use the flashall
script if you are having any trouble.
Test: atest vts_kernel_encryption_test
Reported-by: YongQin Liu <yongqin.liu@linaro.org>
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: Idd57774ac21ca1535259e679fc92f127e1e710e0
Diffstat (limited to 'hikey/init.hikey.rc')
| -rw-r--r-- | hikey/init.hikey.rc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/hikey/init.hikey.rc b/hikey/init.hikey.rc index 8046f91f..6ea3b3b3 100644 --- a/hikey/init.hikey.rc +++ b/hikey/init.hikey.rc @@ -1,5 +1,8 @@ import init.common.rc +on fs + mount_all /vendor/etc/fstab.${ro.hardware} + on post-fs # Set supported opengles version setprop ro.hardware.hwcomposer drm_hikey |