| commit | 1294f9456dc4e65171c996eb9ce19fa7e788eafa | [log] [tgz] |
|---|---|---|
| author | Alan Stokes <alanstokes@google.com> | Mon Aug 21 14:34:12 2023 +0100 |
| committer | Alan Stokes <alanstokes@google.com> | Wed Aug 23 14:19:05 2023 +0000 |
| tree | 2cd0c4ad98b1835d6e0585b03d286c42505ae6b6 | |
| parent | a0d553b55a3cf222d76eb6d4991274c9e1eea3fa [diff] |
Run app payloads as non-root. This is in preparation before moving to running multiple payload processes in multiple UIDs. Add a new payload user and group in the system-reserved range, only within Microdroid, and assign them to the payload process. Fix up a bunch of DAC permissions to make sure the payload still has access to the things it should have. Add a test to check we aren't running as root, and make some minor test fixes. This is a potentially breaking change, so for now I've disabled it via Rust conditional compilation (and marked the new test as @Ignore). I claim the changes that aren't protected by this are harmless. I've run tests with and without the cfg option enabled. Unrelated changes done in passing: - Move a comment from reference to definition. - Make sure encryptedstore logs any errors in full. - Use with_context in a few more places. Bug: 296393106 Test: atest MicrodroidTests Change-Id: I6648580615a9fce906dd170f999e11f63e5874d9
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
How-Tos: