| commit | c8ce1d552e2db8d9e164abf569841ddc41583e9b | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Mon Jan 13 11:16:28 2025 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Mon Jan 13 05:13:18 2025 -0800 |
| tree | 681669add7b710b1d40049ebf5d51f7bf18f6137 | |
| parent | 4ab1fb97a1595a6d9b3973022a885926c9d68723 [diff] |
Skip: isNewInstanceTest nPVM/without Secretkeeper Non protected VM using legacy Secret mechanism do not reliably implement the isNewInstance. This is because, in case of legacy mechanism, pVM would rely on pvmfw to set the appropriate DT property. But non-protected VM, pvmfw is never run. Note that is possible to implement this for nPVM - for e.g., by checking if there is already existing saved data in Microdroid partition in instance.img. We disable the test first as mitigation. Test: NA Bug: 389030806 Change-Id: I5510c56de90fd001a78249504a599df0f9cb5aa2
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: