Use keymaster to wrap the cryptfs keys.

Requires selinux change
https://googleplex-android-re...

Change-Id: I1a35fe15b311d3f5203c5bc02d3db87e942cf554

Don't block based on keyguard type, and pass type to encryption function.

Requires:
https://g...

This reverts commit 5cc86c57416eccb70dcc949d68587f08726f96fa.

Without two more commits, this wi...

Add option to enablecrypto to take type, allowing us to set type
when encrypting.

Bug: 13749169...

Stop encryption when battery is low, mark position, and continue on reboot.

Note - support for ...

If we are not to double prompt, we need to pass the password from
CryptKeeper to KeyStore. Since...

Check for versions >= feature version, not equal

Bug: 13526708
Change-Id: Ie07f6334e6b7c5ca0d7f...

* commit '470f0b3ff46493b4a46b3599db33a29e94615d30':
Avoid segv by checking argc in "storage u...

* commit 'a29997ae260d3d7cf41c40d9c7ba42b761b12d30':
Avoid segv by checking argc in "storage u...

This enables running "vdc mountall" in filesystem recovery tests where a partition is first unmo...

* commit '470f0b3ff46493b4a46b3599db33a29e94615d30':
Avoid segv by checking argc in "storage u...

Change-Id: Iffd67746e2e273c4c3f87741e5f13aa511ccb557
Signed-off-by: JP Abgrall <[email protected]>

* commit '3c0d02aa03118713e6e770b54d1c530ff866f156':
Convert all selinux_android_restorecon an...

* commit '1dc1fb4adc71ea9cf26a5033513bd3a1474f79a1':
vold: suppress unused argument warning me...

* commit '311edc8cb2dd5c86bad49f9696333874b400f9c4':
Add SELinux restorecon calls on ASEC cont...

* commit '1d8e3ce8da962e5ff98d36e75f6b02873fdddb70':
vold: fix errors inside ALOGV

* commit '706efb2254b68a6cd2441b519dd8445ca3df362d':
Add SELinux restorecon calls on ASEC cont...

Change-Id: I4bf4dd29a65f82f91738526b80d5b579c26f8bfe

This will allow fine-grained labeling of the
contents of ASEC containers. Some of the contents
n...

Add a call to vold that says if we decrypted the data partition. Reset the
flag so that it only ...

Modify enablecrypto command to make the password optional. When it is
not there, default encrypt...

* commit '3214d1f5a4dbece12e00f1c122e4c2e291715706':
Convert all selinux_android_restorecon an...

* commit '49dd24c238e86c57e97f919af7fbf8ee3d79b737':
vold: suppress unused argument warning me...

* commit '3c0d02aa03118713e6e770b54d1c530ff866f156':
Convert all selinux_android_restorecon an...

* commit '1dc1fb4adc71ea9cf26a5033513bd3a1474f79a1':
vold: suppress unused argument warning me...

Store encryption type in crypto footer, and provide functions to
manipulate it. Add mount_defaul...

(cherry picked from commit 3e971277db0d87652af5622c989233e7159ab909)

Change-Id: Ic1ab533f756fbd...

Change-Id: Ic1ab533f756fbd44b1f2e5ae12e2f5736ace7740

libselinux selinux_android_restorecon API is changing to the more
general interface with flags a...

* commit 'ca3593df3d48cb4b51acf89e6df4872b922fd51d':
Add SELinux restorecon calls on ASEC cont...

* commit '311edc8cb2dd5c86bad49f9696333874b400f9c4':
Add SELinux restorecon calls on ASEC cont...

* commit 'e985c9ab10fed452b97138170b4d69288d076b06':
vold: fix errors inside ALOGV

* commit '1d8e3ce8da962e5ff98d36e75f6b02873fdddb70':
vold: fix errors inside ALOGV

Fix errors exposed by adding compile-time checking to disabled ALOGVs.

Change-Id: I29bd6e9a7648...

This will allow fine-grained labeling of the
contents of ASEC containers. Some of the contents
n...

For ext4 filesystems, only encrypt blocks in use.

Needs matching ext4 utils changes from
https...

* commit 'e8e1d80c64db85526a003e88c3dba36ff33dac74':
Validate asec names.

* commit '4d5d99ce39b5edd0b78c47a93563aed6b3d56356':
Validate asec names.

* commit '7cf05b15b76b91aa07182e86a730d7552b23130c':
Validate asec names.

* commit '2f0a1d66585fb44f59d913d3417422486ef10225':
Validate asec names.

* commit '7f6932df89756f796c3a1f04f748db39a0564561':
Validate asec names.

* commit '35ab611925aea29fc4088b5c3de7c8c77d956b8b':
Validate asec names.

* commit '3e03bf8a7ab9dcee8897f275c75adfcdb20e0fdc':
Validate asec names.

* commit 'fd2dcf905abd3dc76738fd864e3979bd6e5ce183':
Validate asec names.

* commit 'f4770dcf6ffe2baba16cbb290aba16f735c51962':
Validate asec names.

* commit '0de7c61102611ccd5df1ca48cb733bf037512c6b':
Validate asec names.

Make sure asec names only contain alphanumeric, underscores,
dots, or dashes. Don't allow double...

Make sure asec names only contain alphanumeric, underscores,
dots, or dashes. Don't allow double...

* commit '353b45f84fa0bde76c91d338f843ff27c6f646ad':
vold: fix warnings for 64-bit

Replace MINOR(dev_t) and MAJOR(dev_t) with minor and major,
which cast to int.
Cast int to uintp...

* commit '8328e8150f4e7b785785754f2d44794e7bab3577':
vold: remove $(KERNEL_HEADERS) from inclu...

The kernel headers are already in the include path, and manually
adding them again will break on...

By setting ro.crypto.readonly to 1, cryptfs will mount an encrypted
filesystem that is normally ...

* commit '46f8c2b954e11c2266871b8110b74bd6a11f3661':
vold: cryptfs: Don't update KDF without v...

* commit '7bdfa52d934465e2182e2f1c200c4d8581ad5da6':
vold: cryptfs: Don't update KDF without v...

Prior to this, the Key derivation function would get
blindly updated even if the user entered t...

* commit '86697c72ae29661ad64cfd7b134fa3d3215e0cc3':
Handle missing UUID/LABEL from blkid.

* commit '6bcd362edd1f0ad97807276ff7f9f16991df99a4':
Handle missing UUID/LABEL from blkid.

Bug: 11627785
Change-Id: Iee757abbc3795234f41d513a6aed8ad33855cb7a

Currently, if a non-framework process or service is using /data,
unmounting will fail as nothing...

* commit '3aefb598e4811acc5a198cc9ba20025d95803353':
Use correct minor device number to format...

* commit 'cc21d6ea5881a9f576296317bde8d818b3e4fc01':
Use correct minor device number to format...

When formatting SD card partitions, instead of assuming partition
minor device numbers start fro...

* commit 'f4a8c0b9f646cd9fa51fe3746bc8a00bb987124b':
Extract UUID and label from inserted volu...

* commit '32e2090562552041a15e73afcce1e9948d9eb634':
Clean up ASEC unmounting on physical stor...

* commit 'bcdbd9ac0657a27ff9f7772e74c45ec1e2d460c7':
Clean up ASEC unmounting on physical stor...

* commit '10939ac7e8c9fd141f45f1d6d82c78d5f5f5319c':
Extract UUID and label from inserted volu...

When physical devices are unsafely removed, unmountAllAsecsInDir()
fails to find any ASECs, and ...

Uses "blkid" tool to extract metadata from an inserted volume, and
reports it up to the framewor...

* commit 'ece855c21d5f21603edf7a67c56181502857b1df':
DO NOT MERGE. Fix crash in vold

* commit '18afaca1ad6f480ab6ac259278c8c8013aaab45a':
DO NOT MERGE. Fix crash in vold

* commit 'a9266df57798d1f8f27ab4ab0cde098d1de801c4':

* commit '4d9c9bd5cc5f81954b1e9724d125b8947b412b04':

b/11239345

Change-Id: I46a8d6b38e3c093e20e1e5c4f01efc13d1960ad4

b/11239345

Change-Id: I46a8d6b38e3c093e20e1e5c4f01efc13d1960ad4

* commit '1e89211d109482979a55f47bb4b091009017b4ef':
Remove unused MAX_PARTS define

* commit '98d05700d6055532e6e37675e21b83b3c97b7c6e':
Remove unused MAX_PARTS define

* commit '3a941d6812ccf52fd4fe1c1891041c14f25d0b91':
Use android_fork_execvp() instead of syst...

* commit 'ba6ae8db137d012c9b8e11f9f8321c7771698e92':
Add support for more expressive SD card p...