sdm660-common: Switch to FBEv2 emmc optimised encryption
Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
parent
6cf2314019
commit
5c094cad89
5 changed files with 16 additions and 10 deletions
|
@ -1,6 +1,3 @@
|
|||
# Adoptable Storage
|
||||
ro.crypto.volume.options=aes-256-xts
|
||||
|
||||
# ART
|
||||
pm.dexopt.ab-ota=speed-profile
|
||||
dalvik.vm.dex2oat64.enabled=true
|
||||
|
@ -122,6 +119,12 @@ persist.vendor.audio.spatializer.speaker_enabled=true
|
|||
# Camera
|
||||
vendor.camera.aux.packageblacklist=com.discord
|
||||
|
||||
# Crypto
|
||||
ro.crypto.dm_default_key.options_format.version=2
|
||||
ro.crypto.volume.filenames_mode=aes-256-cts
|
||||
ro.crypto.volume.metadata.method=dm-default-key
|
||||
ro.crypto.volume.options=::v2
|
||||
|
||||
# Data
|
||||
persist.vendor.data.iwlan.enable=true
|
||||
persist.vendor.data.mode=concurrent
|
||||
|
|
|
@ -12,8 +12,8 @@
|
|||
# Non-A/B fstab.qcom variant
|
||||
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
|
||||
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime wait,check,fileencryption=ice,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge wait,check,fileencryption=ice,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
|
||||
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=1000,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait
|
||||
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait
|
||||
|
|
|
@ -12,8 +12,8 @@
|
|||
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
|
||||
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
|
||||
/dev/block/bootdevice/by-name/system / ext4 ro,barrier=1,discard wait,avb
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nosuid,nodev,barrier=1,discard,noauto_da_alloc,lazytime wait,check,formattable,fileencryption=ice,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nosuid,nodev,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge wait,check,formattable,fileencryption=ice,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,discard,noauto_da_alloc,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
|
||||
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=1000,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait
|
||||
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait
|
||||
|
|
|
@ -9,8 +9,8 @@
|
|||
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
|
||||
/dev/block/zram0 none swap defaults zramsize=50%,zram_backingdev_size=512M
|
||||
/dev/block/bootdevice/by-name/system / ext4 ro,barrier=1,discard wait,slotselect
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime wait,check,encryptable=footer,quota,formattable,length=-16384,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,inline_xattr,reserve_root=32768,resgid=1065,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge wait,check,encryptable=footer,quota,formattable,length=-16384,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data f2fs nodev,nosuid,fsync_mode=nobarrier,lazytime,background_gc=sync,gc_merge,atgc,checkpoint_merge latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/userdata /data ext4 nodev,nosuid,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=aes-256-xts:aes-256-cts:v2+emmc_optimized,checkpoint=fs,quota,reservedsize=128M,fsverity
|
||||
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults
|
||||
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt vfat ro,shortname=lower,uid=0,gid=1000,dmask=227,fmask=337,context=u:object_r:firmware_file:s0 wait,slotselect
|
||||
/dev/block/bootdevice/by-name/bluetooth /vendor/bt_firmware vfat ro,shortname=lower,uid=1002,gid=3002,dmask=227,fmask=337,context=u:object_r:bt_firmware_file:s0 wait,slotselect
|
||||
|
|
|
@ -143,7 +143,7 @@ on init
|
|||
on fs
|
||||
wait /dev/block/platform/soc/${ro.boot.bootdevice}
|
||||
symlink /dev/block/platform/soc/${ro.boot.bootdevice} /dev/block/bootdevice
|
||||
mount_all /vendor/etc/fstab.qcom
|
||||
mount_all --early /vendor/etc/fstab.qcom
|
||||
chown root system /mnt/vendor/persist
|
||||
chmod 0771 /mnt/vendor/persist
|
||||
mkdir /mnt/vendor/persist/data 0700 system system
|
||||
|
@ -156,6 +156,9 @@ on fs
|
|||
chmod 0644 /mnt/vendor/dsp/fastrpc_shell_3
|
||||
mount none /mnt/vendor/dsp/fastrpc_shell_3 /vendor/dsp/cdsp/fastrpc_shell_3 bind
|
||||
|
||||
on late-fs
|
||||
mount_all --late /vendor/etc/fstab.qcom
|
||||
|
||||
on post-fs
|
||||
start vendor.qseecomd
|
||||
wait_for_prop vendor.sys.listeners.registered true
|
||||
|
|
Loading…
Reference in a new issue