commit f6f3f854853594e35f349807fbdd61ec0974f1b4
author Jaesoo Lee <jaesoo@google.com> Mon Apr 10 19:42:19 2017 +0900
committer Jaesoo Lee <jaesoo@google.com> Wed Apr 12 10:08:26 2017 +0900
tree 8b04b40dba3f81306b717ce9392d973870af3b7e
parent dc75d8876ee9a7ec4e674f6476fadc2fb895f7f4

disable module loading after BOOT_COMPLETED broadcast

This CL disables module loading by writing 1 to
/proc/sys/kernel/modules_disabled when the property sys.boot_completed
is set to 1 by ActivityManagerService (at the broadcast of
PHASE_BOOT_COMPLETED).

Bug: 36515654
Test: tested on sailfish and verified that module loading is disabled in
userdebug and enabled in eng mode
Merged-In: Id38d34a6395966ab21e440614337c0cfca791ad0
(cherry picked from commit 6ed19d1675ab7a9b45d1b82c90aac2be8f408a2e)

Change-Id: I2faa459b450b3a64f854c832c6b91cbf682bbffa

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 3758362..17dade4 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -644,6 +644,12 @@
 on property:sys.boot_completed=1
     bootchart stop
 
+on property:sys.boot_completed=1 && property:ro.build.type=user
+    write /proc/sys/kernel/modules_disabled 1
+
+on property:sys.boot_completed=1 && property:ro.build.type=userdebug
+    write /proc/sys/kernel/modules_disabled 1
+
 # system server cannot write to /proc/sys files,
 # and chown/chmod does not work for /proc/sys/ entries.
 # So proxy writes through init.