• Milan Broz's avatar
    Support activation options for error handling modes in dm-verity. · 4dd703ea
    Milan Broz authored
    This patch adds veritysetup support for these Linux kernel dm-verity options:
    
      --ignore-corruption - dm-verity just logs detected corruption
      --restart-on-corruption - dm-verity restarts the kernel if corruption is detected
    
      If the options above are not specified, default behaviour for dm-verity remains.
      Default is that I/O operation fails with I/O error if corrupted block is detected.
    
      --ignore-zero-blocks - Instructs dm-verity to not verify blocks that are expected
       to contain zeroes and always return zeroes directly instead.
    
    NOTE that these options could have serious security or functional impacts,
    do not use them without assessing the risks!
    4dd703ea
veritysetup.c 15.6 KB