| commit | 7012b007d007b4b1cf138767e564b515b1b2537c | [log] [tgz] |
|---|---|---|
| author | Seungjae Yoo <seungjaeyoo@google.com> | Thu Nov 09 15:08:22 2023 +0900 |
| committer | Seungjae Yoo <seungjaeyoo@google.com> | Sat Dec 23 21:15:59 2023 +0900 |
| tree | 51fcd91e0c880ab64bb81d12fbe5ffcf39662dbc | |
| parent | 3bea8ccd694704abaf926148906be92eaaae00d7 [diff] |
Enable verifying vendor partition This change would make the vendor partition be verified by root digest in DT node. Root digest is passed from the host for the non-protected VM, and from the pvmfw for the protected VM. This change should be submitted after supporting passing root digest for the pvmfw. Bug: 285855436 Test: atest MicrodroidTests Test: atest MicrodroidBenchmarks#testMicrodroidDebugBootTime_withVendorPartition Test: adb shell /apex/com.android.virt/bin/vm run-microdroid --vendor /vendor/etc/avf/microdroid/microdroid_vendor.img Test: adb shell /apex/com.android.virt/bin/vm run-microdroid --vendor /vendor/etc/avf/microdroid/microdroid_vendor.img --protected Change-Id: Ic9de35509a42ecdc7b00cc2ec3dd2dbcc1d71125
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: