fs_mgr: always use "check_at_most_once"
dm-verity's overhead is non-negligible. As we're optimizing for performance over security, always use "check_at_most_once". This feature is available on kernels v4.17 and onwards and is equivalent to CONFIG_DM_ANDROID_VERITY_AT_MOST_ONCE_DEFAULT_ENABLED on older kernels. Change-Id: Ib8b13d8429ac62bb1553ae81a7175d33fdb2e471 Signed-off-by: Juhyung Park <qkrwngud825@gmail.com>
This commit is contained in:
parent
0ab0aae852
commit
737ea45a84
|
@ -79,9 +79,8 @@ bool ConstructVerityTable(const FsAvbHashtreeDescriptor& hashtree_desc,
|
|||
// Always use ignore_zero_blocks.
|
||||
target.IgnoreZeroBlocks();
|
||||
|
||||
if (hashtree_desc.flags & AVB_HASHTREE_DESCRIPTOR_FLAGS_CHECK_AT_MOST_ONCE) {
|
||||
// Always check only once
|
||||
target.CheckAtMostOnce();
|
||||
}
|
||||
|
||||
LINFO << "Built verity table: '" << target.GetParameterString() << "'";
|
||||
|
||||
|
|
Loading…
Reference in New Issue