commit | be780868ba60975a46dfe04bb471f1582298fc6a | [log] [tgz] |
---|---|---|
author | Wei Wang <wvw@google.com> | Thu Apr 20 14:37:55 2017 -0700 |
committer | Wei Wang <wvw@google.com> | Fri Apr 21 11:54:55 2017 -0700 |
tree | 67cf45fdd7d67e38e1d6ab77d5d12e7543e283cd | |
parent | 829d8d0c7711424f3c1e6393aff9005f8062bc58 [diff] |
Ensure update_verifier run before zygote Currently zygote is started early for FBE device but update_verifier is run later which creates a potential risk. This CL ensures update_verifier run before zygote touches anything within data/ partition. With this change, we also start zygote early for unencrypted/unsupported encryption state device. Bug: 37543411 Test: marlin boots Change-Id: I95daa73bc1a503eecb70d7be78251b74b773abf8