From 03c11dfce22a389404b492ed9475adc3441774dc Mon Sep 17 00:00:00 2001 From: John Stultz Date: Tue, 27 Jul 2021 04:34:04 +0000 Subject: HiKey960: Enable metadata encryption This fully enables metadata encryption on hikey960 by following the instructions here: https://source.android.com/security/encryption/metadata?hl=en Mostly just adding --early/--late mountall arguments in the init.rc and the "latemount" and "keydirectory=/metadata/vold/metadata_encryption" options to the userdata fstab line. Note: You will likely need to flash new userdata (and possibly reflash metadata as well) after applying this. Use the flashall script if you are having any trouble. Test: atest vts_kernel_encryption_test Reported-by: YongQin Liu Signed-off-by: John Stultz Change-Id: Idd57774ac21ca1535259e679fc92f127e1e710e0 --- hikey/init.hikey.rc | 3 +++ 1 file changed, 3 insertions(+) (limited to 'hikey/init.hikey.rc') diff --git a/hikey/init.hikey.rc b/hikey/init.hikey.rc index 8046f91f..6ea3b3b3 100644 --- a/hikey/init.hikey.rc +++ b/hikey/init.hikey.rc @@ -1,5 +1,8 @@ import init.common.rc +on fs + mount_all /vendor/etc/fstab.${ro.hardware} + on post-fs # Set supported opengles version setprop ro.hardware.hwcomposer drm_hikey -- cgit v1.2.3