commit 888a6238810b4c3c00108cb92f9755e74acd9ecf
author Daniel Micay <danielmicay@gmail.com> Tue May 17 00:40:52 2016 -0400
committer Jeff Vander Stoep <jeffv@google.com> Wed Jun 01 17:01:18 2016 -0700
tree 3e2c53f900b308ece4687c3b52ab972af128d596
parent 1059f37377fd37cc311db522b4b5689086480d17

disable unpriv perf by default in user{,debug} builds

(Cherry picked from commit fe01f56c0d5c42508e1e82f5976e4c10bb00f632)

Bug: 29054680

Change-Id: If04bc63fc366006cde842a50b7c764f89d7449a6

core/main.mk

diff --git a/core/main.mk b/core/main.mk
index f9aad2b..651ba98 100644
--- a/core/main.mk
+++ b/core/main.mk
@@ -390,6 +390,7 @@
 ifneq (,$(user_variant))
   # Target is secure in user builds.
   ADDITIONAL_DEFAULT_PROPERTIES += ro.secure=1
+  ADDITIONAL_DEFAULT_PROPERTIES += security.perf_harden=1
 
   ifeq ($(user_variant),user)
     ADDITIONAL_DEFAULT_PROPERTIES += ro.adb.secure=1