diff options
| author | 2023-04-25 17:49:43 +0000 | |
|---|---|---|
| committer | 2023-04-25 17:51:17 +0000 | |
| commit | 2353f4cfec30c94c57be9e92df071c96d63fbb90 (patch) | |
| tree | 021f957bc5392507cad95cf5513e46d695c0cbd3 /api/api.go | |
| parent | ac40d0da012e7fb9f28f0bc3a07312ca6e842b1a (diff) | |
Replace incomplete path-based check with statx
The current check is incomplete as it doesn't capture /system and
others. Switch to hasFsverity (which calls statx) to directly query
the filesystem the fs-verity-ness. This only needs the commom getattr
SELinux privileged, so no sepolicy change is needed.
Bug: 279597861
Bug: 258093107
Test: see 258093107#30
Change-Id: I3140b770b57c4fedc8f077adddda5ec2a50c4ee6
Diffstat (limited to 'api/api.go')
0 files changed, 0 insertions, 0 deletions