Skip to content

Commit 452779a

Browse files
muhomorrthestinger
authored andcommitted
make persist.adb.tls_server.enable system property non-persistent
persist.adb.tls_server.enable sysprop enables persistent network ADB, which severely weakens verified boot. Network ADB is disabled after each reboot by the system_server, but in a fragile way, see frameworks/base/services/core/java/com/android/server/adb/AdbService.java It's not clear whether this system_server behavior is intentional.
1 parent 0ec7245 commit 452779a

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

init/property_service.cpp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1428,6 +1428,9 @@ static void HandleInitSocket() {
14281428
auto persistent_properties = LoadPersistentProperties();
14291429
for (const auto& property_record : persistent_properties.properties()) {
14301430
auto const& prop_name = property_record.name();
1431+
if (prop_name == "persist.adb.tls_server.enable") {
1432+
continue;
1433+
}
14311434
auto const& prop_value = property_record.value();
14321435
InitPropertySet(prop_name, prop_value);
14331436
}

0 commit comments

Comments
 (0)