| commit | 9cf731bd2995205bb0aee8484c4f1427a4ec2254 | [log] [tgz] |
|---|---|---|
| author | Jaewan Kim <jaewan@google.com> | Fri Jan 19 14:45:45 2024 +0900 |
| committer | Jaewan Kim <jaewan@google.com> | Wed Jan 31 13:52:09 2024 +0900 |
| tree | 843c18a00523194fea813c59ceb5b6023dbd9715 | |
| parent | 4036d2df9c2b0f4d396f54e356f26d5791320e3e [diff] |
virtmgr: Add libfsfdt for reading host DT from file system Host DT blob exists at /sys/firmware/fdt, but it's only readable by root. (permission is 400). To workaround the permission issue, this CL reads host DT from file system which doesn't have such permission issue. We already did the similar for the debug policy. Here are alternatives, but I didn't pick: - Use libfdt in root process (e.g. vfio_handler) or modify the file's permission: No-go. I can do the same with less permission. No reason for having super-power. - Use dtc implementation: No-go. I don't want to include a foreign binary in our APEX. In addition, dtc exits current process if something goes wrong, so wrapper library doesn't fit. Bug: 318431695 Test: manually tested with host DT by using fsfdt and dtdiff tool. Change-Id: Ic0640d5dee3165d957cffed958126d31de50633a
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: