• Daniel Micay's avatar
    enable secure_delete by default · 97ef26ef
    Daniel Micay authored
    This sanitizes deleted data by overwriting it with zeroes, rather than
    having it persist within SQLite's free list. In some cases, the data may
    end up persisting on the underlying storage due to wear levelling but
    only a process with direct access to block devices would be able to
    access it.
    
    This can be disabled via `PRAGMA SECURE_DELETE = 0;` for niches where
    deletion throughput is more important than enhanced privacy. The
    performance impact is very small unless large strings and blobs are
    being deleted. Android itself doesn't have any uses where disabling it
    would make sense, and very few apps will be negatively impacted. As a
    data point, Chromium and Firefox already use this for their own
    databases.
    
    Change-Id: I07f0e1584f0b2405f080198ad7b1f4e7ed7f68fb
    97ef26ef
Android.mk 3.6 KB