diff options
| author | Martijn Coenen <maco@google.com> | 2021-01-18 11:14:22 +0100 |
|---|---|---|
| committer | Martijn Coenen <maco@google.com> | 2021-01-18 13:42:53 +0100 |
| commit | c7a26dc263a5fb1c4830f700e19ea19ae66fee54 (patch) | |
| tree | 7cab26b7d0b0d2eed7441301a825ee1ebaa31233 /code_coverage/empty_policy | |
| parent | ba73e995e5e52657492bad13baf611a1b60c756a (diff) | |
Move restorecon of /data earlier in boot sequence.
A future early-boot daemon (on-device signing) needs to access
/data/misc before fs-verity keys are locked. Therefore, move the
restorecon of /data up a bit, to make sure the labels are correct. To be
safe, only run it after init_user0, since that function is responsible
for loading DE keys.
Also move early boot keys and fs-verity key locking a bit later, since
the on-device signing daemon needs to use both of these, but it also
needs the restorecon to function correctly.
Bug: 174740982
Test: manual
Change-Id: I9b6e44d9b547d420e1c6ba01fb3d3accc0625e20
Diffstat (limited to 'code_coverage/empty_policy')
0 files changed, 0 insertions, 0 deletions