Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 1 | # Copyright (C) 2017 The Android Open Source Project |
| 2 | # |
| 3 | # Bionic loader config file. |
| 4 | # |
| 5 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 6 | # Don't change the order here. The first pattern that matches with the |
| 7 | # absolute path of an executable is selected. |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 8 | dir.system = /system/bin/ |
| 9 | dir.system = /system/xbin/ |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 10 | |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 11 | dir.vendor = /odm/bin/ |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 12 | dir.vendor = /vendor/bin/ |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 13 | dir.vendor = /data/nativetest/odm |
| 14 | dir.vendor = /data/nativetest64/odm |
| 15 | dir.vendor = /data/benchmarktest/odm |
| 16 | dir.vendor = /data/benchmarktest64/odm |
Jiyong Park | a2935e0 | 2017-09-29 05:04:00 +0900 | [diff] [blame] | 17 | dir.vendor = /data/nativetest/vendor |
| 18 | dir.vendor = /data/nativetest64/vendor |
| 19 | dir.vendor = /data/benchmarktest/vendor |
| 20 | dir.vendor = /data/benchmarktest64/vendor |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 21 | |
Jiyong Park | a2935e0 | 2017-09-29 05:04:00 +0900 | [diff] [blame] | 22 | dir.system = /data/nativetest |
| 23 | dir.system = /data/nativetest64 |
| 24 | dir.system = /data/benchmarktest |
| 25 | dir.system = /data/benchmarktest64 |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 26 | |
| 27 | [system] |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 28 | additional.namespaces = sphal,vndk,rs |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 29 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 30 | ############################################################################### |
| 31 | # "default" namespace |
| 32 | # |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 33 | # Framework-side code runs in this namespace. However, libs from other |
| 34 | # partitions are also allowed temporarily. |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 35 | ############################################################################### |
| 36 | namespace.default.isolated = false |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 37 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 38 | namespace.default.search.paths = /system/${LIB} |
| 39 | namespace.default.search.paths += /odm/${LIB} |
| 40 | namespace.default.search.paths += /vendor/${LIB} |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 41 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 42 | namespace.default.asan.search.paths = /data/asan/system/${LIB} |
| 43 | namespace.default.asan.search.paths += /system/${LIB} |
| 44 | namespace.default.asan.search.paths += /data/asan/odm/${LIB} |
| 45 | namespace.default.asan.search.paths += /odm/${LIB} |
| 46 | namespace.default.asan.search.paths += /data/asan/vendor/${LIB} |
| 47 | namespace.default.asan.search.paths += /vendor/${LIB} |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 48 | |
| 49 | ############################################################################### |
| 50 | # "sphal" namespace |
| 51 | # |
| 52 | # SP-HAL(Sameprocess-HAL)s are the only vendor libraries that are allowed to be |
| 53 | # loaded inside system processes. libEGL_<chipset>.so, libGLESv2_<chipset>.so, |
| 54 | # android.hardware.graphics.mapper@2.0-impl.so, etc are SP-HALs. |
| 55 | # |
| 56 | # This namespace is exclusivly for SP-HALs. When the framework tries to dynami- |
| 57 | # cally load SP-HALs, android_dlopen_ext() is used to explicitly specifying |
| 58 | # that they should be searched and loaded from this namespace. |
| 59 | # |
| 60 | # Note that there is no link from the default namespace to this namespace. |
| 61 | ############################################################################### |
| 62 | namespace.sphal.isolated = true |
| 63 | namespace.sphal.visible = true |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 64 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 65 | namespace.sphal.search.paths = /odm/${LIB} |
| 66 | namespace.sphal.search.paths += /vendor/${LIB} |
| 67 | |
| 68 | namespace.sphal.permitted.paths = /odm/${LIB} |
| 69 | namespace.sphal.permitted.paths += /vendor/${LIB} |
| 70 | |
| 71 | namespace.sphal.asan.search.paths = /data/asan/odm/${LIB} |
| 72 | namespace.sphal.asan.search.paths += /odm/${LIB} |
| 73 | namespace.sphal.asan.search.paths += /data/asan/vendor/${LIB} |
| 74 | namespace.sphal.asan.search.paths += /vendor/${LIB} |
| 75 | |
| 76 | namespace.sphal.asan.permitted.paths = /data/asan/odm/${LIB} |
| 77 | namespace.sphal.asan.permitted.paths += /odm/${LIB} |
| 78 | namespace.sphal.asan.permitted.paths += /data/asan/vendor/${LIB} |
| 79 | namespace.sphal.asan.permitted.paths += /vendor/${LIB} |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 80 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 81 | # Once in this namespace, access to libraries in /system/lib is restricted. Only |
| 82 | # libs listed here can be used. |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 83 | namespace.sphal.links = default,vndk,rs |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 84 | |
| 85 | # WARNING: only NDK libs can be listed here. |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 86 | namespace.sphal.link.default.shared_libs = libc.so |
| 87 | namespace.sphal.link.default.shared_libs += libEGL.so |
| 88 | namespace.sphal.link.default.shared_libs += libGLESv1_CM.so |
| 89 | namespace.sphal.link.default.shared_libs += libGLESv2.so |
| 90 | namespace.sphal.link.default.shared_libs += libdl.so |
| 91 | namespace.sphal.link.default.shared_libs += liblog.so |
| 92 | namespace.sphal.link.default.shared_libs += libm.so |
| 93 | namespace.sphal.link.default.shared_libs += libnativewindow.so |
| 94 | namespace.sphal.link.default.shared_libs += libstdc++.so |
| 95 | namespace.sphal.link.default.shared_libs += libsync.so |
| 96 | namespace.sphal.link.default.shared_libs += libvndksupport.so |
| 97 | namespace.sphal.link.default.shared_libs += libz.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 98 | |
| 99 | # WARNING: only VNDK-SP libs can be listed here. DO NOT EDIT this line. |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 100 | namespace.sphal.link.vndk.shared_libs = android.hardware.renderscript@1.0.so |
| 101 | namespace.sphal.link.vndk.shared_libs += android.hardware.graphics.common@1.0.so |
| 102 | namespace.sphal.link.vndk.shared_libs += android.hardware.graphics.mapper@2.0.so |
| 103 | namespace.sphal.link.vndk.shared_libs += android.hidl.memory@1.0.so |
| 104 | namespace.sphal.link.vndk.shared_libs += libbase.so |
| 105 | namespace.sphal.link.vndk.shared_libs += libc++.so |
| 106 | namespace.sphal.link.vndk.shared_libs += libcutils.so |
| 107 | namespace.sphal.link.vndk.shared_libs += libhardware.so |
| 108 | namespace.sphal.link.vndk.shared_libs += libhidlbase.so |
| 109 | namespace.sphal.link.vndk.shared_libs += libhidlmemory.so |
| 110 | namespace.sphal.link.vndk.shared_libs += libhidltransport.so |
| 111 | namespace.sphal.link.vndk.shared_libs += libhwbinder.so |
| 112 | namespace.sphal.link.vndk.shared_libs += libion.so |
| 113 | namespace.sphal.link.vndk.shared_libs += libutils.so |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 114 | |
| 115 | # Renderscript gets separate namespace |
| 116 | namespace.sphal.link.rs.shared_libs = libRS_internal.so |
| 117 | |
| 118 | ############################################################################### |
| 119 | # "rs" namespace |
| 120 | # |
| 121 | # This namespace is exclusively for Renderscript internal libraries. |
| 122 | # This namespace has slightly looser restriction than the vndk namespace because |
| 123 | # of the genuine characteristics of Renderscript; /data is in the permitted path |
| 124 | # to load the compiled *.so file and libmediandk.so can be used here. |
| 125 | ############################################################################### |
| 126 | namespace.rs.isolated = true |
Jiyong Park | 7075bca | 2017-08-16 23:32:54 +0900 | [diff] [blame] | 127 | namespace.rs.visible = true |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 128 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 129 | namespace.rs.search.paths = /odm/${LIB}/vndk-sp${VNDK_VER} |
| 130 | namespace.rs.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 131 | namespace.rs.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 132 | namespace.rs.search.paths += /odm/${LIB} |
| 133 | namespace.rs.search.paths += /vendor/${LIB} |
| 134 | |
| 135 | namespace.rs.permitted.paths = /odm/${LIB} |
| 136 | namespace.rs.permitted.paths += /vendor/${LIB} |
| 137 | namespace.rs.permitted.paths += /data |
| 138 | |
| 139 | namespace.rs.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp${VNDK_VER} |
| 140 | namespace.rs.asan.search.paths += /odm/${LIB}/vndk-sp${VNDK_VER} |
| 141 | namespace.rs.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp${VNDK_VER} |
| 142 | namespace.rs.asan.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 143 | namespace.rs.asan.search.paths += /data/asan/system/${LIB}/vndk-sp${VNDK_VER} |
| 144 | namespace.rs.asan.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 145 | namespace.rs.asan.search.paths += /data/asan/odm/${LIB} |
| 146 | namespace.rs.asan.search.paths += /odm/${LIB} |
| 147 | namespace.rs.asan.search.paths += /data/asan/vendor/${LIB} |
| 148 | namespace.rs.asan.search.paths += /vendor/${LIB} |
| 149 | |
| 150 | namespace.rs.asan.permitted.paths = /data/asan/odm/${LIB} |
| 151 | namespace.rs.asan.permitted.paths += /odm/${LIB} |
| 152 | namespace.rs.asan.permitted.paths += /data/asan/vendor/${LIB} |
| 153 | namespace.rs.asan.permitted.paths += /vendor/${LIB} |
| 154 | namespace.rs.asan.permitted.paths += /data |
Jiyong Park | eb9694a | 2017-05-09 15:07:43 +0900 | [diff] [blame] | 155 | |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 156 | namespace.rs.links = default,vndk |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 157 | |
| 158 | namespace.rs.link.default.shared_libs = libc.so |
| 159 | namespace.rs.link.default.shared_libs += libEGL.so |
| 160 | namespace.rs.link.default.shared_libs += libGLESv1_CM.so |
| 161 | namespace.rs.link.default.shared_libs += libGLESv2.so |
| 162 | namespace.rs.link.default.shared_libs += libdl.so |
| 163 | namespace.rs.link.default.shared_libs += liblog.so |
| 164 | namespace.rs.link.default.shared_libs += libm.so |
| 165 | namespace.rs.link.default.shared_libs += libnativewindow.so |
| 166 | namespace.rs.link.default.shared_libs += libstdc++.so |
| 167 | namespace.rs.link.default.shared_libs += libsync.so |
| 168 | namespace.rs.link.default.shared_libs += libvndksupport.so |
| 169 | namespace.rs.link.default.shared_libs += libz.so |
| 170 | # These two libs are private LLNDK libs but are exceptionally visible |
| 171 | # in this 'rs' namespace because RenderScript framework libraries |
| 172 | # which are loaded into this namespace are using them. |
| 173 | namespace.rs.link.default.shared_libs += libft2.so |
| 174 | namespace.rs.link.default.shared_libs += libmediandk.so |
| 175 | |
| 176 | namespace.rs.link.vndk.shared_libs = android.hardware.renderscript@1.0.so |
| 177 | namespace.rs.link.vndk.shared_libs += android.hardware.graphics.common@1.0.so |
| 178 | namespace.rs.link.vndk.shared_libs += android.hardware.graphics.mapper@2.0.so |
| 179 | namespace.rs.link.vndk.shared_libs += android.hidl.memory@1.0.so |
| 180 | namespace.rs.link.vndk.shared_libs += libbase.so |
| 181 | namespace.rs.link.vndk.shared_libs += libc++.so |
| 182 | namespace.rs.link.vndk.shared_libs += libcutils.so |
| 183 | namespace.rs.link.vndk.shared_libs += libhardware.so |
| 184 | namespace.rs.link.vndk.shared_libs += libhidlbase.so |
| 185 | namespace.rs.link.vndk.shared_libs += libhidlmemory.so |
| 186 | namespace.rs.link.vndk.shared_libs += libhidltransport.so |
| 187 | namespace.rs.link.vndk.shared_libs += libhwbinder.so |
| 188 | namespace.rs.link.vndk.shared_libs += libion.so |
| 189 | namespace.rs.link.vndk.shared_libs += libutils.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 190 | |
| 191 | ############################################################################### |
| 192 | # "vndk" namespace |
| 193 | # |
| 194 | # This namespace is exclusively for vndk-sp libs. |
| 195 | ############################################################################### |
| 196 | namespace.vndk.isolated = true |
Jiyong Park | 6ed1a1c | 2017-09-26 01:38:22 +0900 | [diff] [blame] | 197 | namespace.vndk.visible = true |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 198 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 199 | namespace.vndk.search.paths = /odm/${LIB}/vndk-sp${VNDK_VER} |
| 200 | namespace.vndk.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 201 | namespace.vndk.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 202 | |
| 203 | namespace.vndk.permitted.paths = /odm/${LIB}/hw |
| 204 | namespace.vndk.permitted.paths += /odm/${LIB}/egl |
| 205 | namespace.vndk.permitted.paths += /vendor/${LIB}/hw |
| 206 | namespace.vndk.permitted.paths += /vendor/${LIB}/egl |
| 207 | |
| 208 | namespace.vndk.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp${VNDK_VER} |
| 209 | namespace.vndk.asan.search.paths += /odm/${LIB}/vndk-sp${VNDK_VER} |
| 210 | namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp${VNDK_VER} |
| 211 | namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 212 | namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-sp${VNDK_VER} |
| 213 | namespace.vndk.asan.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 214 | |
| 215 | namespace.vndk.asan.permitted.paths = /data/asan/odm/${LIB}/hw |
| 216 | namespace.vndk.asan.permitted.paths += /odm/${LIB}/hw |
| 217 | namespace.vndk.asan.permitted.paths += /data/asan/odm/${LIB}/egl |
| 218 | namespace.vndk.asan.permitted.paths += /odm/${LIB}/egl |
| 219 | namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/hw |
| 220 | namespace.vndk.asan.permitted.paths += /vendor/${LIB}/hw |
| 221 | namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/egl |
| 222 | namespace.vndk.asan.permitted.paths += /vendor/${LIB}/egl |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 223 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 224 | # When these NDK libs are required inside this namespace, then it is redirected |
| 225 | # to the default namespace. This is possible since their ABI is stable across |
| 226 | # Android releases. |
| 227 | namespace.vndk.links = default |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 228 | namespace.vndk.link.default.shared_libs = android.hidl.memory@1.0-impl.so |
| 229 | namespace.vndk.link.default.shared_libs += libEGL.so |
| 230 | namespace.vndk.link.default.shared_libs += libc.so |
| 231 | namespace.vndk.link.default.shared_libs += libdl.so |
| 232 | namespace.vndk.link.default.shared_libs += liblog.so |
| 233 | namespace.vndk.link.default.shared_libs += libm.so |
| 234 | namespace.vndk.link.default.shared_libs += libnativewindow.so |
| 235 | namespace.vndk.link.default.shared_libs += libstdc++.so |
| 236 | namespace.vndk.link.default.shared_libs += libsync.so |
| 237 | namespace.vndk.link.default.shared_libs += libvndksupport.so |
| 238 | namespace.vndk.link.default.shared_libs += libz.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 239 | |
Jiyong Park | c034a43 | 2017-07-20 15:17:35 +0900 | [diff] [blame] | 240 | ############################################################################### |
| 241 | # Namespace config for vendor processes. In O, no restriction is enforced for |
| 242 | # them. However, in O-MR1, access to /system/${LIB} will not be allowed to |
| 243 | # the default namespace. 'system' namespace will be added to give limited |
| 244 | # (LL-NDK only) access. |
| 245 | ############################################################################### |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 246 | [vendor] |
| 247 | namespace.default.isolated = false |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 248 | |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 249 | namespace.default.search.paths = /odm/${LIB} |
| 250 | namespace.default.search.paths += /odm/${LIB}/vndk${VNDK_VER} |
| 251 | namespace.default.search.paths += /odm/${LIB}/vndk-sp${VNDK_VER} |
| 252 | namespace.default.search.paths += /vendor/${LIB} |
| 253 | namespace.default.search.paths += /vendor/${LIB}/vndk${VNDK_VER} |
| 254 | namespace.default.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 255 | |
| 256 | # Access to system libraries are allowed |
| 257 | namespace.default.search.paths += /system/${LIB}/vndk${VNDK_VER} |
| 258 | namespace.default.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 259 | namespace.default.search.paths += /system/${LIB} |
| 260 | |
Jiyong Park | 483cd2e | 2017-12-19 11:38:45 +0900 | [diff] [blame^] | 261 | namespace.default.asan.search.paths = /data/asan/odm/${LIB} |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 262 | namespace.default.asan.search.paths += /odm/${LIB} |
| 263 | namespace.default.asan.search.paths += /data/asan/odm/${LIB}/vndk${VNDK_VER} |
| 264 | namespace.default.asan.search.paths += /odm/${LIB}/vndk${VNDK_VER} |
| 265 | namespace.default.asan.search.paths += /data/asan/odm/${LIB}/vndk-sp${VNDK_VER} |
| 266 | namespace.default.asan.search.paths += /odm/${LIB}/vndk-sp${VNDK_VER} |
| 267 | namespace.default.asan.search.paths += /data/asan/vendor/${LIB} |
| 268 | namespace.default.asan.search.paths += /vendor/${LIB} |
| 269 | namespace.default.asan.search.paths += /data/asan/vendor/${LIB}/vndk${VNDK_VER} |
| 270 | namespace.default.asan.search.paths += /vendor/${LIB}/vndk${VNDK_VER} |
| 271 | namespace.default.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp${VNDK_VER} |
| 272 | namespace.default.asan.search.paths += /vendor/${LIB}/vndk-sp${VNDK_VER} |
| 273 | namespace.default.asan.search.paths += /data/asan/system/${LIB}/vndk${VNDK_VER} |
| 274 | namespace.default.asan.search.paths += /system/${LIB}/vndk${VNDK_VER} |
| 275 | namespace.default.asan.search.paths += /data/asan/system/${LIB}/vndk-sp${VNDK_VER} |
| 276 | namespace.default.asan.search.paths += /system/${LIB}/vndk-sp${VNDK_VER} |
| 277 | namespace.default.asan.search.paths += /data/asan/system/${LIB} |
| 278 | namespace.default.asan.search.paths += /system/${LIB} |