| commit | ad4c719b4e83c5b1fafc7f6508939b99215d6c02 | [log] [tgz] |
|---|---|---|
| author | Nikita Ioffe <ioffe@google.com> | Fri Feb 02 13:07:00 2024 +0000 |
| committer | Nikita Ioffe <ioffe@google.com> | Fri Feb 02 15:17:51 2024 +0000 |
| tree | 33a61955f86b17b639264157da2fa24275e1febb | |
| parent | fda708420925f0e740a3ac221a5ce14cb6381220 [diff] |
Add a VirtualizationSystemService that runs inside system_server This service will later be used to subscribe to trigger clean up routines when an app is deleted. The code is located in the /apex/com.android.virt/javalib/service-virtualization.jar. This jar contributes to the system_server classpath. The service-virtualization.jar will be installed for both AVF enabled & AVF disabled variants of the virt APEX. However, on the devices that do not support AVF (i.e. using AVF disabled virt APEX), the VirtualizationSystemService won't be started, since the AVF disabled virt APEX won't have the `<apex-system-service>` entry in it's AndroidManifest.xml The change is guarded by the RELEASE_AVF_ENABLE_LLPVM_CHANGES build flag. Bug: 323339759 Test: boot device & check logs Change-Id: I948be5eb38a9911d510f63e4976c117ccdb291f8
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: