Skip to content

Commit 9dd5d40

Browse files
muhomorrthestinger
authored andcommitted
make persist.adb.tls_server.enable system property non-persistent
persist.adb.tls_server.enable sysprop enables persistent network ADB, which severely weakens verified boot. Network ADB is disabled after each reboot by the system_server, but in a fragile way, see frameworks/base/services/core/java/com/android/server/adb/AdbService.java It's not clear whether this system_server behavior is intentional.
1 parent fa6b05a commit 9dd5d40

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

init/property_service.cpp

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1402,6 +1402,10 @@ static void HandleInitSocket() {
14021402
// Read persistent properties after all default values have been loaded.
14031403
auto persistent_properties = LoadPersistentProperties();
14041404
for (const auto& persistent_property_record : persistent_properties.properties()) {
1405+
if (persistent_property_record.name() == "persist.adb.tls_server.enable") {
1406+
continue;
1407+
}
1408+
14051409
InitPropertySet(persistent_property_record.name(),
14061410
persistent_property_record.value());
14071411
}

0 commit comments

Comments
 (0)