MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: correct fs inlinecrypt & label metadata context

Browse source 
* As https://source.android.com/docs/security/features/encryption/file-based said emmc_optimized is a inlinecrypt flavor and can only be applied on emmc 5.2 device which has not been released yet
* Apparently Xiaomi 660 is launched with emmc 5.1 5 years ago and never met the 5.2 spec
* Now really enables inlinecrypt hardware by adding it in mnt_flags
* Use AOSP recommended inlinecrypt_optimized
* Use lazytime for reducing meaningless io
* Label metadata partition

(pix106) i use logdump partition for metadata, not cust

Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
Alcatraz323 2023-03-31 22:36:28 +08:00 committed by pix106
parent 7011aa62a9
commit 0726c25be8
4 changed files with 9 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
rootdir/etc/fstab.qcom
View file

@ -12,8 +12,8 @@
# Non-A/B fstab.qcom variant
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,inlinecrypt,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime,inlinecrypt latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=1000,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait

4
rootdir/etc/fstab_A.qcom
View file

@ -12,8 +12,8 @@
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
/dev/block/bootdevice/by-name/system / ext4 ro,barrier=1,discard wait,avb
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,discard,noauto_da_alloc,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,inlinecrypt,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,discard,noauto_da_alloc,lazytime,inlinecrypt latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=1000,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait

4
rootdir/etc/fstab_AB.qcom
View file

@ -9,8 +9,8 @@
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
/dev/block/bootdevice/by-name/system / ext4 ro,barrier=1,discard wait,slotselect
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,inlinecrypt,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,formattable,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime,inlinecrypt latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+inlinecrypt_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=0,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait,slotselect
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait,slotselect

3
sepolicy/vendor/file_contexts vendored
View file

@ -67,6 +67,9 @@
# Lights
/vendor/bin/hw/android\.hardware\.light-service\.xiaomi u:object_r:hal_light_default_exec:s0
# Metadata
/dev/block/platform/soc/c0c4000\.sdhci/by-name/logdump u:object_r:metadata_block_device:s0
# Mlipay
/(vendor|system/vendor)/bin/mlipayd@1.1 u:object_r:hal_mlipay_default_exec:s0