commit | 5dc05effecca88f06da090dbcdd257666e69c2c7 | [log] [tgz] |
---|---|---|
author | Wei Wang <wvw@google.com> | Thu Apr 20 14:37:55 2017 -0700 |
committer | Wei Wang <wvw@google.com> | Fri Apr 21 11:54:55 2017 -0700 |
tree | 67cf45fdd7d67e38e1d6ab77d5d12e7543e283cd | |
parent | a0bf415cad6dddcc1cdb154a95c795b5a8ecb7aa [diff] |
Ensure update_verifier run before zygote Currently zygote is started early for FBE device but update_verifier is run later which creates a potential risk. This CL ensures update_verifier run before zygote touches anything within data/ partition. With this change, we also start zygote early for unencrypted/unsupported encryption state device. Bug: 37543411 Test: marlin boots Change-Id: I95daa73bc1a503eecb70d7be78251b74b773abf8