Mount encrypted storage with dedicated context

mount crypt device with dedidated fscontext/context. This is required to
restrict the payload from executing something from the directory.

Another use is restricting relabeling from this fscontext.

Bug: 261477008

Test: atest MicrodroidTests#encryptedStorageAvailable
Change-Id: I69445fc16306f7c97b8d4241db34ef92c16e456a
1 file changed
tree: eaf2db3785eb284f5d4c5e334e213c6b8e9fd431
  1. apex/
  2. apkdmverity/
  3. authfs/
  4. avmd/
  5. compos/
  6. demo/
  7. docs/
  8. encryptedstore/
  9. javalib/
  10. launcher/
  11. libs/
  12. microdroid/
  13. microdroid_manager/
  14. pvmfw/
  15. rialto/
  16. tests/
  17. virtualizationservice/
  18. vm/
  19. vm_payload/
  20. vmbase/
  21. vmclient/
  22. zipfuse/
  23. .clang-format
  24. .gitignore
  25. Android.bp
  26. OWNERS
  27. PREUPLOAD.cfg
  28. README.md
  29. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.