| commit | 2353f4cfec30c94c57be9e92df071c96d63fbb90 | [log] [tgz] |
|---|---|---|
| author | Victor Hsieh <victorhsieh@google.com> | Tue Apr 25 17:49:43 2023 +0000 |
| committer | Victor Hsieh <victorhsieh@google.com> | Tue Apr 25 17:51:17 2023 +0000 |
| tree | 021f957bc5392507cad95cf5513e46d695c0cbd3 | |
| parent | ac40d0da012e7fb9f28f0bc3a07312ca6e842b1a [diff] |
Replace incomplete path-based check with statx The current check is incomplete as it doesn't capture /system and others. Switch to hasFsverity (which calls statx) to directly query the filesystem the fs-verity-ness. This only needs the commom getattr SELinux privileged, so no sepolicy change is needed. Bug: 279597861 Bug: 258093107 Test: see 258093107#30 Change-Id: I3140b770b57c4fedc8f077adddda5ec2a50c4ee6