Allow verity flag to be removed from the susperblock:
Tests:
- check the signed file is readable by older kernel after flag
is removed. EXT4_VERITY_FL replaces EXT4_EXT_MIGRATE that has been
removed in 2009.
- when a new kernel is reinstalled, check reenabling verity flag
allow signature to be verified (fsverity measure ...).
Signed-off-by: Gwendal Grignou <gwendal@xxxxxxxxxxxx>
---
misc/tune2fs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/misc/tune2fs.c b/misc/tune2fs.c
index 314cc0d0..724b8014 100644
--- a/misc/tune2fs.c
+++ b/misc/tune2fs.c
@@ -198,7 +198,8 @@ static __u32 clear_ok_features[3] = {
EXT4_FEATURE_RO_COMPAT_QUOTA |
EXT4_FEATURE_RO_COMPAT_PROJECT |
EXT4_FEATURE_RO_COMPAT_METADATA_CSUM |
- EXT4_FEATURE_RO_COMPAT_READONLY
+ EXT4_FEATURE_RO_COMPAT_READONLY |
+ EXT4_FEATURE_RO_COMPAT_VERITY
};
/**
--
2.27.0.111.gc72c7da667-goog
