virtmgr: Log pVM outputs even if DebugLevel::NONE

The code currently assumes that crosvm FDs related to pVM console I/O
(through the virtual UART or the virtio-console) should not be set up
when running a guest that is marked as non-debuggable. This seems to
have been based on the assumption that Microdroid does not generate logs
when non-debuggable, to avoid leaking secrets.

However, the resulting assumption is too restrictive or unnecessary as

1. it also silences the virtual UART, used by pvmfw, which is not
   impacted by the debuggability of the payload it verifies

2. it is based on Microdroid which, being derived from Linux, doesn't
   have full trust in its logs not containing sensitive data but other
   guest payloads might be comfortable logging when non-debuggable

3. (if that was assumed) it does not contribute to the security of the
   pVM as the threat model considers virtmgr an attack vector

Therefore, simply remove this assumption and always pipe the log FDs out
of crosvm, to be logged in the host logcat, as per aosp/2370496.

Test: m virtmgr
Bug: 360152729
Change-Id: I697c414ad25cb6b91d3b8995c41fcdf71c974973
1 file changed
tree: 143327cc970e3135c6f986158040f47f1acb613e
  1. android/
  2. build/
  3. docs/
  4. guest/
  5. libs/
  6. tests/
  7. .clang-format
  8. .gitignore
  9. Android.bp
  10. dice_for_avf_guest.cddl
  11. OWNERS
  12. PREUPLOAD.cfg
  13. README.md
  14. rustfmt.toml
  15. TEST_MAPPING
README.md

Android Virtualization Framework (AVF)

Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.

Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.

If you want a quick start, see the getting started guideline and follow the steps there.

For in-depth explanations about individual topics and components, visit the following links.

AVF components:

AVF APIs:

How-Tos: