2018-06-06 17:32:17 -04:00
|
|
|
dm-verity has been supported since KitKat! Why isn't it enabled on all devices???
|
|
|
|
|
|
|
|
|
|
fstab /system
|
|
|
|
|
verify=[metadata partition]
|
|
|
|
|
|
|
|
|
|
device.mk
|
|
|
|
|
ifeq ($(TARGET_BUILD_VARIANT),user)
|
2019-05-08 05:27:51 -04:00
|
|
|
PRODUCT_SYSTEM_VERITY_PARTITION := /dev/block/by-name/system
|
2018-06-06 17:32:17 -04:00
|
|
|
$(call inherit-product, build/target/product/verity.mk)
|
|
|
|
|
endif
|
|
|
|
|
|
|
|
|
|
init.device.rc
|
|
|
|
|
on init
|
|
|
|
|
# Load persistent dm-verity state
|
|
|
|
|
verity_load_state
|
|
|
|
|
on early-boot
|
|
|
|
|
# Update dm-verity state and set partition.*.verified properties
|
|
|
|
|
verity_update_state
|
2019-01-28 21:48:23 -05:00
|
|
|
|
|
|
|
|
kernel config
|
|
|
|
|
CONFIG_DM_VERITY=y
|
