755199eab15eb2f591973f1b03a740439a04e606 - platform_frameworks_base

commit	755199eab15eb2f591973f1b03a740439a04e606	[log] [tgz]
author	Kohsuke Yatoh <kyatoh@google.com>	Wed Jan 20 01:22:32 2021 -0800
committer	Kohsuke Yatoh <kyatoh@google.com>	Thu Jan 21 11:00:20 2021 -0800
tree	4802033a4c6a5770176f1edd5f7ddea7fb3ef736
parent	ede25d217e0403f604bd22d7dd05fd9dedf5b206 [diff]

Use fs-verity for protecting updatable font files.

- Updatable font files should have fs-verity enabled.
- PostScript name metadata is checked to detect if files are swapped.
- Font revision metadata is checked to detect if version downgrade
  happens.

Bug: 176939176
Test: atest FrameworksServicesTests:UpdatableFontDirTest
Change-Id: Ie59012e17ef4f9db2419db259e0773067ace4120

graphics/java/android/graphics/fonts/SystemFonts.java[diff]
services/core/java/com/android/server/graphics/fonts/FontManagerService.java[diff]
services/core/java/com/android/server/graphics/fonts/UpdatableFontDir.java[diff]
services/core/java/com/android/server/security/FileIntegrityService.java[diff]
services/core/java/com/android/server/security/VerityUtils.java[diff]
services/tests/servicestests/src/com/android/server/graphics/fonts/UpdatableFontDirTest.java[diff]

6 files changed