summaryrefslogtreecommitdiff
path: root/fsverity_init
diff options
context:
space:
mode:
Diffstat (limited to 'fsverity_init')
-rw-r--r--fsverity_init/main.cpp6
1 files changed, 0 insertions, 6 deletions
diff --git a/fsverity_init/main.cpp b/fsverity_init/main.cpp
index 3f75dca9..b502b91c 100644
--- a/fsverity_init/main.cpp
+++ b/fsverity_init/main.cpp
@@ -48,12 +48,6 @@ int main(int argc, const char** argv) {
return -1;
}
} else if (command == "--lock") {
- // Requires files backed by fs-verity to be verified with a key in .fs-verity
- // keyring.
- if (!android::base::WriteStringToFile("1", "/proc/sys/fs/verity/require_signatures")) {
- PLOG(ERROR) << "Failed to enforce fs-verity signature";
- }
-
if (!android::base::GetBoolProperty("ro.debuggable", false)) {
if (keyctl_restrict_keyring(keyring_id, nullptr, nullptr) < 0) {
PLOG(ERROR) << "Cannot restrict .fs-verity keyring";