disable unpriv perf by default in user{,debug} builds

[android-x86/build.git] / core / main.mk

diff --git a/core/main.mk b/core/main.mk
index 9866dff..bfa060c 100644 (file)
--- a/core/main.mk
+++ b/core/main.mk
@@ -376,6 +376,7 @@ tags_to_install :=
 ifneq (,$(user_variant))
   # Target is secure in user builds.
   ADDITIONAL_DEFAULT_PROPERTIES += ro.secure=1
+  ADDITIONAL_DEFAULT_PROPERTIES += security.perf_harden=1
 
   ifeq ($(user_variant),user)
     ADDITIONAL_DEFAULT_PROPERTIES += ro.adb.secure=1