2018-06-06 21:32:17 +00:00
|
|
|
dm-verity has been supported since KitKat! Why isn't it enabled on all devices???
|
|
|
|
|
|
|
|
|
|
fstab /system
|
|
|
|
|
verify=[metadata partition]
|
|
|
|
|
|
|
|
|
|
device.mk
|
|
|
|
|
ifeq ($(TARGET_BUILD_VARIANT),user)
|
2019-05-08 09:27:51 +00:00
|
|
|
PRODUCT_SYSTEM_VERITY_PARTITION := /dev/block/by-name/system
|
2018-06-06 21:32:17 +00:00
|
|
|
$(call inherit-product, build/target/product/verity.mk)
|
|
|
|
|
endif
|
|
|
|
|
|
|
|
|
|
init.device.rc
|
|
|
|
|
on init
|
|
|
|
|
# Load persistent dm-verity state
|
|
|
|
|
verity_load_state
|
|
|
|
|
on early-boot
|
|
|
|
|
# Update dm-verity state and set partition.*.verified properties
|
|
|
|
|
verity_update_state
|
2019-01-29 02:48:23 +00:00
|
|
|
|
|
|
|
|
kernel config
|
|
|
|
|
CONFIG_DM_VERITY=y
|
