Allow apexd to snapshot and restore DE data.

This calls into apexd to allow it to snapshot and restore DE apex data
in the case of a rollback. See the corresponding apexd change for more
information.

Cherry-pick from (unsubmitted) internal CL: ag/10163227

Bug: 141148175
Test: atest StagedRollbackTest#testRollbackApexDataDirectories_DeSys
Change-Id: Ia4bacc9b7b7a77038ba897acbc7db29e177a6433
This commit is contained in:
Oli Lan 2020-01-23 19:52:42 +00:00
parent 28bf90f32b
commit a466ca8ff4

View file

@ -738,6 +738,12 @@ on post-fs-data
init_user0
# Allow apexd to snapshot and restore device encrypted apex data in the case
# of a rollback. This should be done immediately after DE_user data keys
# are loaded. APEXes should not access this data until this has been
# completed.
exec_start apexd-snapshotde
# Set SELinux security contexts on upgrade or policy update.
restorecon --recursive --skip-ce /data