commit | ef4c6ec763e7586b6b5e69c57147e908935712d1 | [log] [tgz] |
---|---|---|
author | Matt Gilbride <mattgilbride@google.com> | Fri Aug 30 16:29:42 2024 +0000 |
committer | Matt Gilbride <mattgilbride@google.com> | Tue Sep 10 14:44:41 2024 +0000 |
tree | 3a3223905425a4dd3ec15d9911b05e578221ce20 | |
parent | 37dda337708b8a3b1e1fe722c3939a60910c7933 [diff] |
Support vendor partition in non-debuggable pVMs Remove the "vendor_hashtree_descriptor_root_digest" prop from the avf node by default. It will be re-added by virtue of being a trusted prop in the case that the caller requested the vendor partition. Stop adding the kerel param "androidboot.microdroid.mount_vendor=1" if the vendorImage is supplied, as the kernel param is replaced by the mechanism described above. Bug: 340506965 Test: TH Change-Id: I2994526c205ac3830efe0fb060b1ba16c747f14a
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: