Gitiles
Code Review Sign In
gerrit.omnirom.org / android_packages_modules_Virtualization / 3854e4082d0dafad9d510f36307245cbdb2f805d
commit3854e4082d0dafad9d510f36307245cbdb2f805d[log] [tgz]
authorAndrew Scull <ascull@google.com>Mon Jul 04 12:10:20 2022 +0000
committerAndrew Scull <ascull@google.com>Mon Jul 04 12:10:20 2022 +0000
tree4bf4ed53783bca53b47c9780687a0693683023a8
parentc44495dd9592b124faebc74edec8b3bb0aaca3c5 [diff]
zipfuse: Support mounting as noexec

Add an option to mount while disallowing the execution of binary files.
This allows for a layer of defence when mounting something that is only
expected to contain data. Although the data may still be treated as a
script, the interpreter for that script will have to come from another
source.

The `zipfuse` command takes the `--noexec` flag to enable this option.

Bug: 237742605
Test: atest ZipFuseTest
Change-Id: I732c96109ceaf65716c2c3ac27862c65bb7bd81f
1 file changed
tree: 4bf4ed53783bca53b47c9780687a0693683023a8
  1. .prebuilt_info/
  2. apex/
  3. apkdmverity/
  4. authfs/
  5. compos/
  6. demo/
  7. docs/
  8. javalib/
  9. launcher/
  10. libs/
  11. microdroid/
  12. microdroid_manager/
  13. pvmfw/
  14. tests/
  15. virtualizationservice/
  16. vm/
  17. vmbase/
  18. vmclient/
  19. zipfuse/
  20. rustfmt.toml ⇨ ../../../build/soong/scripts/rustfmt.toml
  21. .clang-format
  22. .gitignore
  23. Android.bp
  24. OWNERS
  25. PREUPLOAD.cfg
  26. README.md
  27. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.