commit 20b7f78204b0c0e7991471207bac396a37515a9d
author Jaesoo Lee <jaesoo@google.com> Wed Apr 12 22:59:35 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Apr 12 22:59:37 2017 +0000
tree 9710c4aab11ca70471498c5e66083cb688148061
parent e4e4777fc775447a0cc76c3b23c9920bd6b49631
parent dcf4d19dd9ace8b04b8659bd3e3c4803d315b3a5

Merge "disable module loading after BOOT_COMPLETED broadcast"

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 3758362..17dade4 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -644,6 +644,12 @@
 on property:sys.boot_completed=1
     bootchart stop
 
+on property:sys.boot_completed=1 && property:ro.build.type=user
+    write /proc/sys/kernel/modules_disabled 1
+
+on property:sys.boot_completed=1 && property:ro.build.type=userdebug
+    write /proc/sys/kernel/modules_disabled 1
+
 # system server cannot write to /proc/sys files,
 # and chown/chmod does not work for /proc/sys/ entries.
 # So proxy writes through init.