tequilaOS/platform_system_vold
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
2088 commits 1 branch 0 tags 9.7 MiB
Commit graph

8 commits

Author SHA1 Message Date
Paul Crowley
98a23a19d1 Fix spurious error 
Bug: 79542247
Test: error no longer appears
Change-Id: I2cf91c8cd937b81041a47e4b64a882445a80eb0b
 2018-05-10 15:19:15 -07:00
Paul Crowley
0fd2626fc3 Add a mount with metadata encryption service 
Don't use the FDE flow to support metadata encryption; just provide a
vold service which directly mounts the volume and use that.

Bug: 63927601
Test: Boot Taimen to SUW with and without metadata encryption.
Change-Id: Ifc6a012c02c0ea66893020ed1d0da4cba6914aed
 2018-02-01 10:08:17 -08:00
Paul Crowley
e2ee152e46 Refactor of use of fstab in advance of fix. 
Test: Ensure device still boots.
Bug: 65737446
Change-Id: Ie466db9f5d8c77656cc525c0d49fe6a3cce154f1
 2017-09-26 14:21:10 -07:00
Pavel Grafov
e2e2d308df Zero memory used for encryuption keys. 
std::vector with custom zeroing allocator is used instead of
std::string for data that can contain encryption keys.

Bug: 64201177
Test: manually created a managed profile, changed it's credentials
Test: manually upgraded a phone with profile from O to MR1.
Change-Id: Ic31877049f69eba9f8ea64fd99acaaca5a01d3dd
 2017-08-10 17:31:03 +01:00
Paul Crowley
e4c93da492 Abolish AutoCloseFD.h in favour of unique_fd 
Android has a standard way to do what AutoCloseFD.h does, so use that
instead. Refactor before work on the bug.

Bug: 36029169
Test: Deleted a user and checked that secdiscard logs looked good.
Change-Id: I5d8bedfb3fa1f032fd2bced88b1b561e4a8c2ff4
 2017-06-16 16:14:03 -07:00
Guang Zhu
5b6c6a2c4a Revert "Enable metadata encryption" 
Bug: 37792477

This reverts commit 3963b23645.

Change-Id: I3b6bf5a9a4c3899aabe2c824d8498a06981daed8
 2017-04-28 23:58:39 +00:00
Paul Lawrence
3963b23645 Enable metadata encryption 
Bug: 26778031
Test: Boots, reboots, sector 0 of userdata encrypted
      Make sure an FDE device, both default and password protected,
      boots.
      Make sure an FBE device without metadata encryption boots.
Change-Id: Ic44a32ce7e9b978e9c9e2dc112b26206741c838d
 2017-04-28 16:44:23 +00:00
Paul Crowley
d5759811ff Add support for metadata encryption 
Support encrypting metadata in /userdata using the dm-default-key
driver with a key in the /metadata partition.

Bug: 29189559
Test: Angler & Marlin build and boot
Change-Id: I716b117508d4bb4f6a4039293acb848cbc60f67b
 2017-04-21 13:40:20 -07:00