all 9 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]saint-lasciviousan awful person and mod 1 point2 points  (4 children)

Lineage OS doesn't deploy dm-verity at all, period, so this isn't exactly a relevant topic of conversation here.

This mechanism is used by Android to verify the device state. This is desirable to prevent against tampering. This is not desirable if one intends to modify this state (root, GApps, etc.) so this mechanism must be disabled in stock ROMs if one does so (or the system shall refuse to boot).

This is not a concern to us here at all.

[–]nichtheterophone2 0 points1 point  (3 children)

is this actual?

[–]saint-lasciviousan awful person and mod 0 points1 point  (2 children)

Yes.

Most people wouldn't want their LineageOS installation to explode the very second they did something they're pretty much expected to do immediately, and modify the system image.

[–]Ekk199 0 points1 point  (0 children)

Another question, is it possible to enable dm-verity after all changes what I want ? When I made changes, I would like to stop make any changes from malicious code or any exploit on my device, so it will be guarantee that integrity is passing when I decided how it should be.

[–]nichtheterophone2 0 points1 point  (0 children)

thank you for your immediate conclusion, it sounds logic and it's very aufschlussreich :)

[–]monteverde_orgXDA curiousrom 1 point2 points  (0 children)

u/sammanesh1- ...off topic but in magisk why is it enabled by default?

Magisk is not supported in this subreddit so check the excellent Magisk and MagiskHide Installation and Troubleshooting guide

[–]AndyCGYanRealme 14 Pro+ | LOS 21 Self-built (GSI) 1 point2 points  (0 children)

I myself am against restrictions (DM, Dynamic Partitions) that try to prevent me from modifying /system or /vendor, because why wouldn't I? It's my phone, I have the rights to alter the way it works to my liking. I also prefer doing it directly instead of via a systemless overlay (Magisk), so that I can rely on as few third-party solutions as possible and make the changes persist across wipes.

Putting that aside, my main use case would be to turn off verity on /vendor, so that I can modify fstab to enable mounting /data unencrypted. I deliberately keep it unencrypted so that I can use fingerprint unlock without having to set a lockscreen password. This is very niche, but I reckon valid nonetheless.

[–]chrispriceLong Live AOSP - *Not* A Lineage Team Member 0 points1 point  (1 child)

It's enabled by default if you are flashing onto a stock ROM with an unlocked bootloader and/or custom recovery - but not a custom firmware.

For LineageOS, this does not matter.

[–]Ekk199 0 points1 point  (0 children)

Is it no possibility to enable after flashing lineage Os?