DivestOS/Misc/Features/dm-verity.txt

dm-verity has been supported since KitKat! Why isn't it enabled on all devices???

fstab /system
	verify=[metadata partition]

device.mk
	ifeq ($(TARGET_BUILD_VARIANT),user)
	PRODUCT_SYSTEM_VERITY_PARTITION := [system partition]
	$(call inherit-product, build/target/product/verity.mk)
	endif

init.device.rc
	on init
		# Load persistent dm-verity state
		verity_load_state
	on early-boot
		# Update dm-verity state and set partition.*.verified properties
		verity_update_state

kernel config
	CONFIG_DM_VERITY=y
Tweaks 2018-06-06 17:32:17 -04:00			`dm-verity has been supported since KitKat! Why isn't it enabled on all devices???`

			`fstab /system`
			`verify=[metadata partition]`

			`device.mk`
			`ifeq ($(TARGET_BUILD_VARIANT),user)`
			`PRODUCT_SYSTEM_VERITY_PARTITION := [system partition]`
			`$(call inherit-product, build/target/product/verity.mk)`
			`endif`

			`init.device.rc`
			`on init`
			`# Load persistent dm-verity state`
			`verity_load_state`
			`on early-boot`
			`# Update dm-verity state and set partition.*.verified properties`
			`verity_update_state`
Minor changes - Update cherrypicks - Update submodules - Add some comments 2019-01-28 21:48:23 -05:00
			`kernel config`
			`CONFIG_DM_VERITY=y`