gta4xl-common: Enable FS-Verity
* fsverity flag in fstab is needed to make init run tune2fs -O verity on it
Change-Id: Iebc34457f8d92bf8e09cf1981a47e597aa7ab7c3
diff --git a/configs/init/fstab.exynos9611 b/configs/init/fstab.exynos9611
index 0a5c2ce..316f4bf 100644
--- a/configs/init/fstab.exynos9611
+++ b/configs/init/fstab.exynos9611
@@ -9,13 +9,13 @@
odm /odm ext4 ro,errors=panic wait,logical,first_stage_mount
odm /odm erofs ro wait,logical,first_stage_mount
-/dev/block/platform/13520000.ufs/by-name/metadata /metadata ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic wait,first_stage_mount,formattable,check
+/dev/block/platform/13520000.ufs/by-name/metadata /metadata ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic wait,first_stage_mount,formattable,check,fsverity
/dev/block/platform/13520000.ufs/by-name/boot /boot emmc defaults recoveryonly
/dev/block/platform/13520000.ufs/by-name/recovery /recovery emmc defaults recoveryonly
/dev/block/platform/13520000.ufs/by-name/vbmeta /vbmeta emmc defaults first_stage_mount
/dev/block/platform/13520000.ufs/by-name/cache /cache ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic wait,check
-/dev/block/platform/13520000.ufs/by-name/userdata /data ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic latemount,wait,check,fileencryption=aes-256-xts,reservedsize=128M,quota
+/dev/block/platform/13520000.ufs/by-name/userdata /data ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic latemount,wait,check,fileencryption=aes-256-xts,reservedsize=128M,quota,fsverity
/dev/block/platform/13520000.ufs/by-name/efs /mnt/vendor/efs ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic wait,check
/dev/block/platform/13520000.ufs/by-name/cpefs /mnt/vendor/cpefs ext4 noatime,nosuid,nodev,noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic wait,check,nofail
/dev/block/platform/13520000.ufs/by-name/misc /misc emmc defaults defaults
diff --git a/vendor.prop b/vendor.prop
index e3a9dbe..6b977a7 100644
--- a/vendor.prop
+++ b/vendor.prop
@@ -1,6 +1,9 @@
## Adoptable Storage
ro.crypto.volume.options=aes-256-xts
+## APK Verity
+ro.apk_verity.mode=2
+
## Audio
audio.offload.min.duration.secs=30
aaudio.mmap_policy=2