commit | 5b7b49452ef0ad6bd7922b0353cd9ddab7498c6e | [log] [tgz] |
---|---|---|
author | Shikha Panwar <shikhapanwar@google.com> | Wed Dec 18 15:32:49 2024 +0000 |
committer | Shikha Panwar <shikhapanwar@google.com> | Wed Jan 08 20:37:27 2025 +0000 |
tree | cb41d8606b2ac174912fddfb514393f930dde77d | |
parent | c2746f8d6d5fab3d0f2e8d031c18881b7589435b [diff] |
Add isNewInstanceStatus to vm_payload api This can be used by payload to determine if this the first boot of the VM. This becomes useful since `AVmPayload_getVmInstanceSecret` is essentially equivalent to get_or_create secrets. Payload should be able to check if the secrets were newly created or are the old ones & this could be used to meaningfully use the secret. For ex, encryptedstore or other data encrypted using the VM secrets restored via backup and restore cannot be meaningfully decrypted using newly created secrets on the new device. Test: MicrodroidTests#isNewInstanceTest Bug: 327576724 Bug: 378911776 Change-Id: I05983c7b1239d29f86f2b3fb9be7e3a1f2f91039
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: