| commit | daf396aaa220dbb68745fe3a91f82d9987f976fa | [log] [tgz] |
|---|---|---|
| author | Seungjae Yoo <seungjaeyoo@google.com> | Mon Apr 15 12:58:07 2024 +0900 |
| committer | Seungjae Yoo <seungjaeyoo@google.com> | Mon Apr 15 13:49:10 2024 +0900 |
| tree | 60a36808326a7ac60f4853257f4af5483e1ecb02 | |
| parent | c3219d5f46a60ee2b8bc6f27cd63cda32c914881 [diff] |
Make SecurityException being detected in nativeSpawn When android.permission.MANAGE_VIRTUAL_MACHINE isn't granted to the app, framework API should throw SecurityException for permission check. After granting CAP_SYS_NICE to virtmgr, connection is not made between virtmgr and Java framework side. This change does sending any single character from virtmgr through readyFd-waitFd pipe, so that nativeSpawn function of framework side can detect if connection is healthy, before trying to create actual binder connection. And this health check can leave more descriptive error with throwing Security Exception. Bug: 328051532 Test: atest MicrodroidTestAppNoPerm Test: atest MicrodroidTestApp Change-Id: Iee246a136459fbf30e21a480fc9f8a786711324f
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: