product is an OS partition too

This commit is contained in:
Daniel Micay 2019-05-01 03:54:29 -04:00
parent 9fd48da8ab
commit dc67ec8690

View File

@ -77,11 +77,12 @@ TMPDIR="$PWD/tmp" ./flash-all.sh</pre>
<p>You should now proceed to locking the bootloader before using the device as locking <p>You should now proceed to locking the bootloader before using the device as locking
wipes the data again.</p> wipes the data again.</p>
<h2>Locking the bootloader</h2> <h2>Locking the bootloader</h2>
<p>Locking the bootloader is important as it enables full verified boot. It also prevents using <p>Locking the bootloader is important as it enables full verified boot. It also
fastboot to flash, format or erase partitions. Verified boot will detect modifications to any of prevents using fastboot to flash, format or erase partitions. Verified boot will
the OS partitions (vbmeta, boot/dtbo, system, vendor) and it will prevent reading any modified / detect modifications to any of the OS partitions (vbmeta, boot/dtbo, product, system,
corrupted data. If changes are detected, error correction data is used to attempt to obtain the vendor) and it will prevent reading any modified / corrupted data. If changes are
original data at which point it's verified again which makes verified boot robust to non-malicious detected, error correction data is used to attempt to obtain the original data at
which point it's verified again which makes verified boot robust to non-malicious
corruption.</p> corruption.</p>
<p>Reboot into the bootloader menu and set it to locked:</p> <p>Reboot into the bootloader menu and set it to locked:</p>
<pre>fastboot flashing lock</pre> <pre>fastboot flashing lock</pre>