Support remote readonly directory

A remote readonly directory allows a user process to open/read files at
the configured mountpoint sub-directory, e.g.
/authfs/42/system/framework/framework.jar. Only allowlisted files are
visible.

There will be transparent integrity checks for all files under such a
directory, but it is not done in this change yet (tracked by
b/203251769).

See doc of `Args::remote_ro_dir` in main.rs for more details.

Bug: 203251769
Test: atest AuthFsHostTest

Change-Id: I716d6820a047761159c79947504579677c0fdeec
4 files changed
tree: de11a64ba295b9ad2c1c2ea5c5223cc8570e980c
  1. apex/
  2. apkdmverity/
  3. apkverify/
  4. authfs/
  5. binder_common/
  6. compos/
  7. demo/
  8. docs/
  9. idsig/
  10. javalib/
  11. launcher/
  12. libs/
  13. microdroid/
  14. microdroid_manager/
  15. pvmfw/
  16. tests/
  17. virtualizationservice/
  18. vm/
  19. vmconfig/
  20. zipfuse/
  21. .clang-format
  22. Android.bp
  23. OWNERS
  24. PREUPLOAD.cfg
  25. README.md
  26. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.