Gitiles
Code Review Sign In
gerrit.omnirom.org / android_packages_modules_Virtualization / 59eb85b64698aa9a14cf906d62a894c612af1b50
commit59eb85b64698aa9a14cf906d62a894c612af1b50[log] [tgz]
authorNikita Ioffe <ioffe@google.com>Thu Jan 19 14:51:12 2023 +0000
committerNikita Ioffe <ioffe@google.com>Thu Jan 19 21:15:16 2023 +0000
tree60345e99584e281363226f53fb80765ae0399945
parent861c9de206d136546c47db27d6a01689f0614179 [diff]
Mount /data with MS_NOEXEC

We want to ensure that W^X is guaranteed for Microdroid VMs. This change
doesn't guarantee that W^X is enforced for FULL_DEBUG VMs, as a user can
enable adb root, and remount the /data without MS_NOEXEC flag.

This is intended, as it allows developers to debug & get familiar with
the Microdroid execution environment.

Bug: 265261525
Test: atest MicrodroidTestApp
Change-Id: I622e3d95d9d8fd6d26bfb690499acf7208ca4d52
5 files changed
tree: 60345e99584e281363226f53fb80765ae0399945
  1. apex/
  2. apkdmverity/
  3. authfs/
  4. avmd/
  5. compos/
  6. demo/
  7. docs/
  8. encryptedstore/
  9. javalib/
  10. launcher/
  11. libs/
  12. microdroid/
  13. microdroid_manager/
  14. pvmfw/
  15. rialto/
  16. tests/
  17. virtualizationmanager/
  18. virtualizationservice/
  19. vm/
  20. vm_payload/
  21. vmbase/
  22. vmclient/
  23. zipfuse/
  24. rustfmt.toml ⇨ ../../../build/soong/scripts/rustfmt.toml
  25. .clang-format
  26. .gitignore
  27. Android.bp
  28. OWNERS
  29. PREUPLOAD.cfg
  30. README.md
  31. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.