| commit | 4d262dc70366f86942fdf245ff04e7588bce6aa3 | [log] [tgz] |
|---|---|---|
| author | Andrew Scull <ascull@google.com> | Fri Oct 21 13:14:33 2022 +0000 |
| committer | Andrew Scull <ascull@google.com> | Mon Oct 24 15:58:47 2022 +0000 |
| tree | d93f502aafd8dbcceeb8bfa4474d0e01b98e9b3f | |
| parent | c522ec76573a540cdf0fa7f809f878691129c6f4 [diff] |
Restrict access to certain vm_payload APIs Require the USE_CUSTOM_VIRTUAL_MACHINE permission in order to use certain APIs from the VM payload that should not be exposed to all clients of the AVF API. The permission is inferred from the use of a VM config file, which requires the permission. The permission is only granted to platform and test components. Use this new ability to prevent VM payloads from accessing the raw DICE chain and attestation CDI. Fix: 243514248 Test: atest MicrodroidTests ComposHostTestCases Change-Id: I1fd65ee1d0f624bc3ff9143f597e455c84ed2b02
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.