ANDROID: Add kconfig to make dm-verity check_at_most_once default enabled

This change adds a kernel config for default enable
the check_at_most_once dm-verity option. This is to give us
the ability to enforce the usage of at_most_once
for entry-level phones.

Change-Id: Id40416672c4c2209a9866997d8c164b5de5dc7dc
Signed-off-by: Patrik Torstensson <totte@google.com>
Bug: 72664474

diff --git a/drivers/md/Kconfig b/drivers/md/Kconfig
index 6ac0297db28c7e2b8d6d84725fe3dcf60d41c122..9f8b4e0dc3cc3a770595494b2e7e409d292315f1 100644 (file)
--- a/drivers/md/Kconfig
+++ b/drivers/md/Kconfig
@@ -572,4 +572,24 @@ config DM_ANDROID_VERITY
          of the metadata contents are verified against the key included
          in the system keyring. Upon success, the underlying verity
          target is setup.
+
+config DM_ANDROID_VERITY_AT_MOST_ONCE_DEFAULT_ENABLED
+       bool "Verity will validate blocks at most once"
+   depends on DM_VERITY
+   ---help---
+         Default enables at_most_once option for dm-verity
+
+         Verify data blocks only the first time they are read from the
+         data device, rather than every time.  This reduces the overhead
+         of dm-verity so that it can be used on systems that are memory
+         and/or CPU constrained.  However, it provides a reduced level
+         of security because only offline tampering of the data device's
+         content will be detected, not online tampering.
+
+         Hash blocks are still verified each time they are read from the
+         hash device, since verification of hash blocks is less performance
+         critical than data blocks, and a hash block will not be verified
+         any more after all the data blocks it covers have been verified anyway.
+
+         If unsure, say N.
 endif # MD

diff --git a/drivers/md/dm-verity-target.c b/drivers/md/dm-verity-target.c
index 751855c24d5a91807018044265d97d3d12c5f15a..ecb506b6923d19e3cb17db513d395f431e74b74c 100644 (file)
--- a/drivers/md/dm-verity-target.c
+++ b/drivers/md/dm-verity-target.c
@@ -1123,6 +1123,14 @@ int verity_ctr(struct dm_target *ti, unsigned argc, char **argv)
                        goto bad;
        }
 
+#ifdef CONFIG_DM_ANDROID_VERITY_AT_MOST_ONCE_DEFAULT_ENABLED
+       if (!v->validated_blocks) {
+               r = verity_alloc_most_once(v);
+               if (r)
+                       goto bad;
+       }
+#endif
+
        v->hash_per_block_bits =
                __fls((1 << v->hash_dev_block_bits) / v->digest_size);