From ea0a7ba3c3e275a39f0ee196bceed86a3d3636f3 Mon Sep 17 00:00:00 2001 From: Juhyung Park Date: Tue, 21 May 2024 20:39:48 +0900 Subject: [PATCH] fs_mgr: always use "check_at_most_once" dm-verity's overhead is non-negligible. As we're optimizing for performance over security, always use "check_at_most_once". This feature is available on kernels v4.17 and onwards and is equivalent to CONFIG_DM_ANDROID_VERITY_AT_MOST_ONCE_DEFAULT_ENABLED on older kernels. Change-Id: Ib8b13d8429ac62bb1553ae81a7175d33fdb2e471 Signed-off-by: Juhyung Park --- fs_mgr/libfs_avb/avb_util.cpp | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/fs_mgr/libfs_avb/avb_util.cpp b/fs_mgr/libfs_avb/avb_util.cpp index 37c9eabb8..144d34e4d 100644 --- a/fs_mgr/libfs_avb/avb_util.cpp +++ b/fs_mgr/libfs_avb/avb_util.cpp @@ -80,9 +80,8 @@ bool ConstructVerityTable(const FsAvbHashtreeDescriptor& hashtree_desc, // Always use ignore_zero_blocks. target.IgnoreZeroBlocks(); - if (hashtree_desc.flags & AVB_HASHTREE_DESCRIPTOR_FLAGS_CHECK_AT_MOST_ONCE) { - target.CheckAtMostOnce(); - } + // Always check only once + target.CheckAtMostOnce(); LINFO << "Built verity table: '" << target.GetParameterString() << "'";