tree 685a7d1b162f60e04800a5f88621f58e342fff8e
parent da95b3f323f1ba535be8d583b366f1cfdba8e1c8
author Paul Crowley <paulcrowley@google.com> 1582090203 -0800
committer Paul Crowley <paulcrowley@google.com> 1582143692 -0800

fscrypt option parsing depends on ro.product.first_api_level

We'd like to change what the defaults are for fscrypt as we get new
and better things, but we don't want to break old devices. So we
arrange for the behavior to depend on the API version the device
launched with.

In addition, we can now supply a default if any of the three fields
are blank, meaning that clients like get_volume_file_encryption_options
don't have to separately specify defaults.

Right now we use the API level to choose between version 1 and version
2 being default, and as a further guard against anyone using the
deprecated FSCRYPT_POLICY_FLAGS_PAD_4 on new devices.

Bug: 147107322
Test: atest fscrypt
Test: Various Cuttlefish configurations
Change-Id: I43c94c1051c61d2b051355dcd428c44c279a3c75