From e873da1ae9093b2f0ffe3dfef6b31a49707fbaa9 Mon Sep 17 00:00:00 2001
From: Eric Biggers <ebiggers@google.com>
Date: Mon, 7 Apr 2025 19:08:38 +0000
Subject: [PATCH] ANDROID: fips140: strip debug symbols from fips140.ko

fips140.ko is intended to be used in production, so strip the debug
symbols from it to reduce the binary size.

Bug: 188620248
Test: tools/bazel run //common:fips140_dist && stat ./out/fips140/dist/fips140.ko
Change-Id: I5a181417409f83475652013f6abffbe81fa5dbd2
Signed-off-by: Eric Biggers <ebiggers@google.com>
---
 BUILD.bazel | 1 +
 1 file changed, 1 insertion(+)

diff --git a/BUILD.bazel b/BUILD.bazel
index 8cababb7a18f..023bed560d1c 100644
--- a/BUILD.bazel
+++ b/BUILD.bazel
@@ -1382,6 +1382,7 @@ kernel_build(
     makefile = ":Makefile",
     module_outs = ["crypto/fips140.ko"],
     post_defconfig_fragments = ["arch/arm64/configs/fips140_gki.fragment"],
+    strip_modules = True,
 )
 
 kernel_abi(