6f0b8b1180
Set the system property that lets the DevicePolicyManager know it can control Memory Tagging Extension on the device. With this property set, when the user turns on AAPM, it will turn on MTE. Bug: 352420507 Test: Manual Flag: android.security.aapm_feature_memory_tagging_extension Change-Id: I2cf9b650286659bc36d0e304c1ad05ff5dac4d5c
74 lines
3 KiB
Makefile
74 lines
3 KiB
Makefile
#
|
|
# Copyright (C) 2020 The Android Open-Source Project
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
ifneq ($(BOARD_WITHOUT_RADIO), true)
|
|
-include vendor/google_devices/zumapro/proprietary/telephony/device-vendor.mk
|
|
endif
|
|
include device/google/zumapro/device.mk
|
|
|
|
# Telephony
|
|
PRODUCT_COPY_FILES += \
|
|
frameworks/native/data/etc/android.hardware.telephony.carrierlock.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.telephony.carrierlock.xml
|
|
|
|
# Android Verified Boot
|
|
PRODUCT_COPY_FILES += \
|
|
frameworks/native/data/etc/android.software.verified_boot.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.verified_boot.xml
|
|
|
|
# Set system properties identifying the chipset
|
|
PRODUCT_VENDOR_PROPERTIES += ro.soc.manufacturer=Google
|
|
TARGET_VENDOR_PROP += device/google/zumapro/vendor.prop
|
|
|
|
PRODUCT_PRODUCT_PROPERTIES += \
|
|
persist.vendor.testing_battery_profile=2
|
|
|
|
# The default value of this variable is false and should only be set to true when
|
|
# the device allows users to retain eSIM profiles after factory reset of user data.
|
|
PRODUCT_PRODUCT_PROPERTIES += \
|
|
masterclear.allow_retain_esim_profiles_after_fdr=true
|
|
|
|
# ZramWriteback
|
|
-include hardware/google/pixel/mm/device_gki.mk
|
|
|
|
# Set thermal warm reset
|
|
PRODUCT_PRODUCT_PROPERTIES += \
|
|
ro.thermal_warmreset = true
|
|
|
|
# Generic zram size setting, can be overridden in project-specific device.mk
|
|
PRODUCT_VENDOR_PROPERTIES += \
|
|
vendor.zram.size?=50p
|
|
|
|
# Indicate that the bootloader supports the MTE developer option switch
|
|
# (MISC_MEMTAG_MODE_MEMTAG_ONCE), with the exception of _fullmte products and
|
|
# eng products that force enable MTE
|
|
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
|
|
ifeq (,$(filter eng,$(TARGET_BUILD_VARIANT)))
|
|
PRODUCT_PRODUCT_PROPERTIES += ro.arm64.memtag.bootctl_supported=1
|
|
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.android.se=off
|
|
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.google.android.bluetooth=off
|
|
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.android.nfc=off
|
|
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.system_server=off
|
|
# Also enable the system property that would turn on MTE when Android Advanced
|
|
# Protection Mode is turned on.
|
|
PRODUCT_PRODUCT_PROPERTIES += ro.arm64.memtag.bootctl_device_policy_manager=true
|
|
endif
|
|
endif
|
|
|
|
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
|
|
ifneq (,$(filter eng,$(TARGET_BUILD_VARIANT)))
|
|
PRODUCT_COPY_FILES += \
|
|
device/google/zumapro/conf/init.eng.memtag.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.eng.memtag.rc
|
|
endif
|
|
endif
|