platform_bootable_recovery/update_verifier/update_verifier.rc

service update_verifier /system/bin/update_verifier
    user root
    group cache system
    priority -20
    ioprio rt 0
update_verifier: don't pass an unused command-line argument update_verifier is being passed the current stage of Full Disk Encryption (FDE): "nonencrypted" or "${vold.decrypt}". However, since FDE is no longer supported, it's actually now always "nonencrypted" (which is confusing because there is encryption, it's just not FDE). Also, update_verifier doesn't actually do anything with this command-line argument, and based on the git history it never has. Therefore, let's update the service definition to just have an "update_verifier" service that passes no command-line argument. Bug: 208476087 Test: presubmit Change-Id: I8b62290360401024b6888c2e9488207d878d3f67 2023-07-11 01:53:56 +02:00			`service update_verifier /system/bin/update_verifier`
update_verifier: raise priority and ioprio and start with exec_start Raise the priority and ioprio of update_verifier and launch with exec_start. This saves ~100ms of time before `class_start main` is executed. Bug: 36511808 Bug: 36102163 Test: Boot bullhead Test: Verify boottime decrease on sailfish Change-Id: I944a6c0d4368ead5b99171f49142da2523ed1bdd 2017-03-28 22:24:56 +02:00			`user root`
Add 'system' to update_verifier's gid This addresses the denial to /dev/cpuset/tasks: update_verifier: type=1400 audit(0.0:377): avc: denied { dac_override } for capability=1 scontext=u:r:update_verifier:s0 tcontext=u:r:update_verifier:s0 tclass=capability permissive=1 update_verifier: type=1400 audit(0.0:378): avc: granted { write } for name="tasks" dev="cgroup" ino=5 scontext=u:r:update_verifier:s0 tcontext=u:object_r:cgroup:s0 tclass=file Bug: 37358323 Test: denial message gone after adding system group Change-Id: I66b4925295a13fbc1c6f26a1bb9bd2f9cebcec3d 2017-04-18 20:29:32 +02:00			`group cache system`
update_verifier: raise priority and ioprio and start with exec_start Raise the priority and ioprio of update_verifier and launch with exec_start. This saves ~100ms of time before `class_start main` is executed. Bug: 36511808 Bug: 36102163 Test: Boot bullhead Test: Verify boottime decrease on sailfish Change-Id: I944a6c0d4368ead5b99171f49142da2523ed1bdd 2017-03-28 22:24:56 +02:00			`priority -20`
update_verifier: tweak priority of update_verifier for quick boot Highest ioprio is 0 for CFQ and we should run update_verifier with that. Tested on device and showing boottime decreased. Bug: 36511808 Bug: 36102163 Test: Boot marlin Change-Id: Iddd925951d976e21014b61e5590bcdae3cea8470 2017-04-03 22:53:49 +02:00			`ioprio rt 0`