summaryrefslogtreecommitdiff
path: root/trusty/coverage/coverage_test.cpp
diff options
context:
space:
mode:
authorEric Biggers <ebiggers@google.com>2017-07-05 12:21:15 -0700
committerEric Biggers <ebiggers@google.com>2017-07-06 13:31:30 -0700
commite9811f36e508785504db2a87d93dbbd89bf2b9a9 (patch)
tree4764ae9eb5885cd8df5f264c159bf30165868ec3 /trusty/coverage/coverage_test.cpp
parent8d3bcd4b6a3bdf2fd1302bd6e89413ff57168e0d (diff)
fs_mgr: set ext4 encryption flag with tune2fs when needed
Upstream kernels (v4.9+, v4.4.67+) have started to enforce that encryption policies cannot be set on ext4 directories unless EXT4_FEATURE_INCOMPAT_ENCRYPT is set in the filesystem superblock, as was the original design. Since Android's userspace was not setting this flag, it was not possible to use "file-based encryption" (FBE) on devices whose kernels enforce this constraint. Fix this by updating fs_mgr to set the flag if needed, similar to how it enables the quota feature if needed. Note that it would, eventually, be simpler to set this flag at mkfs time. But that seems infeasible for now, given the many different ways the userdata filesystem can be formatted --- including via 'fastboot', which I believe is expected to still be compatible with old devices whose kernel and/or e2fsprogs don't support the 'encrypt' flag. Bug: 36231741 Change-Id: Ibafb9a7116fc853b62f8ee074a78499399f290a6
Diffstat (limited to 'trusty/coverage/coverage_test.cpp')
0 files changed, 0 insertions, 0 deletions