Skip to content

Commit cbbe8d9

Browse files
muhomorrthestinger
authored andcommitted
make persist.adb.tls_server.enable system property non-persistent
persist.adb.tls_server.enable sysprop enables persistent network ADB, which severely weakens verified boot. Network ADB is disabled after each reboot by the system_server, but in a fragile way, see frameworks/base/services/core/java/com/android/server/adb/AdbService.java It's not clear whether this system_server behavior is intentional.
1 parent 19e973c commit cbbe8d9

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

init/property_service.cpp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1425,6 +1425,9 @@ static void HandleInitSocket() {
14251425
for (const auto& property_record : persistent_properties.properties()) {
14261426
auto const& prop_name = property_record.name();
14271427
auto const& prop_value = property_record.value();
1428+
if (prop_name == "persist.adb.tls_server.enable") {
1429+
continue;
1430+
}
14281431
InitPropertySet(prop_name, prop_value);
14291432
}
14301433

0 commit comments

Comments
 (0)