openkylin
/
platform_system_core
mirror of https://gitee.com/openkylin/platform_system_core.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity
platform_system_core/fs_mgr/Android.mk

67 lines
1.6 KiB
Makefile
Raw Normal View History

A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
# Copyright 2011 The Android Open Source Project
LOCAL_PATH:= $(call my-dir)
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
common_static_libraries := \
liblogwrap \
libfec \
libfec_rs \
libbase \
libcrypto_utils: convert to Soong. Bug: http://b/30708454 Change-Id: Iaad64272ced766f87e67f2877e990afccc558065
2016-08-06 06:47:57 +08:00
libcrypto_utils \
libcrypto \
Remove "_static" and "_host" suffix from libext4_utils. Bug: 34220783 Change-Id: I967dbaa9c48ad1feed2369c3a40f745b86a350f8
2017-01-12 06:03:11 +08:00
libext4_utils \
fs_mgr: pass sehandle to ext4 format routine When fs_mgr_do_format() is executed, fs_mgr creates a new blank data file system. However, that filesystem is not labeled and causes some unlabeled denials on early boot. Example Denial: avc: denied { search } for pid=2535 comm="logd" name="/" dev="mmcblk0p9" ino=2 scontext=u:r:logd:s0 tcontext=u:object_r:unlabeled:s0 tclass=dir permissive=1 To correct this, pass sehandle to the internal ext4 routine. This way the ext4 filesystem will be labeled at creation and the root inode will have a label. Change-Id: Ieeecaa8bbc258e6d743d281dd956bdaca98b365f Signed-off-by: William Roberts <william.c.roberts@intel.com>
2016-05-14 02:19:42 +08:00
libsquashfs_utils \
fs_mgr: support using libavb to enable dm-verity external/avb/libavb provides the new Android Verified Boot (AVB) flow. It has different verity metadata format than previous formats in fs_mgr_verity.cpp fs_mgr should support using libavb to read the metadata (a.k.a. HASHTREE descriptor in AVB) to enable dm-verity in kernel. Two important files in this commit: - fs_mgr_avb_ops.c: an implementation of struct AvbOps* for libavb to do platform dependent I/O operations, e.g., read_from_partition. - fs_mgr_avb.cpp: it reads the metadata (a.k.a. vbmeta images in AVB) from all partitions, verifies its integrity against the values of androidboot.vbmeta.{hash_alg, size, digest} passed from bootloader in kernel command line. Then enable dm-verity for partitions having the corresponding HASHTREE descriptor and with an 'avb' fstab flag. Bug: 31264231 Test: Enable dm-verity on /system partition Test: Enable dm-verity with FEC on /system partition Change-Id: I4652806984fe5a30c61be0839135b5ca78323d38
2017-01-11 22:21:38 +08:00
libselinux \
libavb
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
include $(CLEAR_VARS)
LOCAL_CLANG := true
LOCAL_SANITIZE := integer
LOCAL_SRC_FILES:= \
Switch fs_mgr/*.c to C++. This is the minimal change just to keep it building, and doesn't attempt to clean up the code. Bug: 34336098 Test: check device can boot Change-Id: I5ff897874f1f14a9a5d1f14fedf1b0749e86dbb3
2017-01-16 21:49:49 +08:00
fs_mgr.cpp \
fs_mgr: moves common functions out of fs_mgr_verity.cpp This commits moves some common functions out of fs_mgr_verity.cpp to be reused by other verified boot flows. It includes: - Move common functions into fs_mgr.c - Move dm_ioctl related functions to a new file: fs_mgr_dm_ioctl.cpp Bug: 31264231 Test: check device can boot with dm-verity Change-Id: Iaa0d8031efbaae12aa28f872f62d3fc3d3763b51
2016-11-11 21:05:44 +08:00
fs_mgr_dm_ioctl.cpp \
Switch fs_mgr/*.c to C++. This is the minimal change just to keep it building, and doesn't attempt to clean up the code. Bug: 34336098 Test: check device can boot Change-Id: I5ff897874f1f14a9a5d1f14fedf1b0749e86dbb3
2017-01-16 21:49:49 +08:00
fs_mgr_format.cpp \
fs_mgr_fstab.cpp \
fs_mgr_slotselect.cpp \
fs_mgr: support using libavb to enable dm-verity external/avb/libavb provides the new Android Verified Boot (AVB) flow. It has different verity metadata format than previous formats in fs_mgr_verity.cpp fs_mgr should support using libavb to read the metadata (a.k.a. HASHTREE descriptor in AVB) to enable dm-verity in kernel. Two important files in this commit: - fs_mgr_avb_ops.c: an implementation of struct AvbOps* for libavb to do platform dependent I/O operations, e.g., read_from_partition. - fs_mgr_avb.cpp: it reads the metadata (a.k.a. vbmeta images in AVB) from all partitions, verifies its integrity against the values of androidboot.vbmeta.{hash_alg, size, digest} passed from bootloader in kernel command line. Then enable dm-verity for partitions having the corresponding HASHTREE descriptor and with an 'avb' fstab flag. Bug: 31264231 Test: Enable dm-verity on /system partition Test: Enable dm-verity with FEC on /system partition Change-Id: I4652806984fe5a30c61be0839135b5ca78323d38
2017-01-11 22:21:38 +08:00
fs_mgr_verity.cpp \
fs_mgr_avb.cpp \
fs_mgr: add a generic fs_mgr_get_boot_config internal API depending on when fs_mgr is trying to read the configuration passed into the kernel commandline, it may be able to read it successfully. Specially in the case when init has not initialized properties. This change adds a new fs_mgr_get_boot_config() API to be used by all fs_mgr code in order to get filesystem parameters specified in kernel command line or device tree. This way the fs_mgr code doesn't have to handle the "early" cases separately anywhere. Test: Tested angler boot with both /system and /vendor mounted in init first stage. Tested sailfish to make sure /vendor can be continued to be mounted early without verity Change-Id: I9a44cdfc32681f714c5d73ae55c3deda95c02545
2017-02-17 11:15:29 +08:00
fs_mgr_avb_ops.cpp \
fs_mgr_boot_config.cpp
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
LOCAL_C_INCLUDES := \
$(LOCAL_PATH)/include \
fs_mgr: introduce fs_mgr_format to format wiped partitions Move fastboot's format logic into fs_mgr, to consolidate the knowledge about how to do this (and when to wipe metadata). Try to format these formattable paritions if they are wiped. If formatting fails, we will fall out to let recovery mode handle it. Bug: 20082763 Change-Id: I397cc197550e78d932e8a154fd234695c46dbe7b
2013-09-06 02:19:21 +08:00
system/vold \
fs_mgr: remove code that gets slot_suffix from misc partition 'slot_suffix' for A/B devices *must* be provided in kernel command line or in device tree. The removed code was unnecessarily looking it up in the 'misc' partition. b/33254008 Test: Boot sailfish Change-Id: I329af2d9a98c34a941596779eb78d14337b864e5 Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-02-15 04:47:30 +08:00
system/extras/ext4_utils
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
LOCAL_MODULE:= libfs_mgr
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
LOCAL_STATIC_LIBRARIES := $(common_static_libraries)
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
LOCAL_EXPORT_C_INCLUDE_DIRS := $(LOCAL_PATH)/include
fs_mgr: turn on -Werror - deal with some -Wunused-variable issues Change-Id: Ie0140d4777ddf862e4bbed76142a1dbb8320c1b0
2014-05-01 06:35:00 +08:00
LOCAL_CFLAGS := -Werror
Revert "Revert "Enable verity on userdebug, and add disable-verity to adb"" This reverts commit 152d2d4234ba89e0c20c4af13e291b6049a7bc33. Fixed build error, and also fixed memory leak spotted from warning. (cherry-pick of bbb36319119edde9377fb80015235893c30d2bc9.) Bug: 17691572 Change-Id: I23b5ba537f7b557432041d4338b38b9be434e981
2014-10-09 22:22:49 +08:00
ifneq (,$(filter userdebug,$(TARGET_BUILD_VARIANT)))
LOCAL_CFLAGS += -DALLOW_ADBD_DISABLE_VERITY=1
endif
fs_mgr: make is_device_secure() work even in the absence of properties. During early mount property area is not initialized, and as a result an 'eng' build will always incorrectly be detected as a 'secure' build by early mount code path resulting into verity error and consequent boot loop. The change here makes sure the is_device_secure() check works with / without properties based on the 'eng' build based build flag so the early mount code works fine both ways. Bug: 35791581 Bug: 27805372 Test: Boot sailfish-{eng,userdebug} builds successfully w/ early mount enabled Change-Id: Icd101ccad56b669f49b60bbb3005d5be9f53b02b Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-02-28 03:33:46 +08:00
ifneq (,$(filter eng,$(TARGET_BUILD_VARIANT)))
LOCAL_CFLAGS += -DALLOW_SKIP_SECURE_CHECK=1
endif
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
include $(BUILD_STATIC_LIBRARY)
include $(CLEAR_VARS)
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
LOCAL_CLANG := true
LOCAL_SANITIZE := integer
Switch fs_mgr/*.c to C++. This is the minimal change just to keep it building, and doesn't attempt to clean up the code. Bug: 34336098 Test: check device can boot Change-Id: I5ff897874f1f14a9a5d1f14fedf1b0749e86dbb3
2017-01-16 21:49:49 +08:00
LOCAL_SRC_FILES:= fs_mgr_main.cpp
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
LOCAL_C_INCLUDES := $(LOCAL_PATH)/include
LOCAL_MODULE:= fs_mgr
LOCAL_MODULE_TAGS := optional
LOCAL_FORCE_STATIC_EXECUTABLE := true
LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)/sbin
LOCAL_UNSTRIPPED_PATH := $(TARGET_ROOT_OUT_UNSTRIPPED)
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
LOCAL_STATIC_LIBRARIES := libfs_mgr \
$(common_static_libraries) \
libcutils \
liblog \
libc \
Remove "_host" and "_static" suffix from libsparse definition. This now combines all the "libsparse" libraries into the same soong target. A minor side-effect of this change is that the libsparse static library depends on the libz shared library instead of the libz static library. This minor change has no effect since targets using the static libsparse library need to explicitly include either the static libz or the shared one. Bug: 34220783 Change-Id: I8f41586cf4c3336791cfa57ab4f5ae59a76d7ffa
2017-01-12 06:37:50 +08:00
libsparse \
Error correction: Use libfec in fs_mgr Use libfec to read and parse verity metadata to protect against data corruption. Bug: 21893453 Change-Id: I3a3543e0d999316707302b3be8735a7133d22946
2015-05-22 22:43:50 +08:00
libz \
libselinux
Link libc++_static into fs_mgr. Change-Id: Ic2461d3a30dbd8a22f9800a33fac27c658340b21
2015-04-02 04:26:04 +08:00
LOCAL_CXX_STL := libc++_static
fs_mgr: turn on -Werror - deal with some -Wunused-variable issues Change-Id: Ie0140d4777ddf862e4bbed76142a1dbb8320c1b0
2014-05-01 06:35:00 +08:00
LOCAL_CFLAGS := -Werror
A filesystem manager library to mount filesystems for init. Instead of specifying in init what to mount, and having various hacks in init itself to deal with encryption, use a filesystem manager library to do the work, that can also be invoked by vold when mounting an encrypted volume. Keep all the magic filesystem info an a device specific fstab file. Change-Id: Ib988f1e4fb0638ba1d5fd98407fa6d8cf862aaca
2012-01-07 11:09:42 +08:00
include $(BUILD_EXECUTABLE)