Google Git
Sign in
android / platform / packages / modules / Virtualization / 102067a6
commit102067a6462747e2132421286f1bc065d833b766[log] [tgz]
authorAndrew Scull <ascull@google.com>Fri Oct 07 00:34:40 2022 +0000
committerAndrew Scull <ascull@google.com>Sun Oct 09 10:10:16 2022 +0000
tree27f37a8a914f4cdb9a6d2da939a2a64e444f1d96
parent3b80c9b14bd28c06f675f583e8b12693d9063705 [diff]
Remove direct access to the sealing CDI from the payload

Change the API from offering the raw sealing CDI to offering VM instance
secrets that happend to be derived from the sealing CDI. This makes it
harder for the payload to leak its sealing CDI and losing the ability to
have secrets in the VM.

Bug: 243514248
Test: atest MicrodroidTests
Test: atest ComposHostTestCases
Change-Id: I0e72dabe7daca4d72a35788412d2ee19a3b446a5
9 files changed
tree: 27f37a8a914f4cdb9a6d2da939a2a64e444f1d96
  1. .prebuilt_info/
  2. apex/
  3. apkdmverity/
  4. authfs/
  5. avmd/
  6. compos/
  7. demo/
  8. docs/
  9. javalib/
  10. launcher/
  11. libs/
  12. microdroid/
  13. microdroid_manager/
  14. pvmfw/
  15. rialto/
  16. tests/
  17. virtualizationservice/
  18. vm/
  19. vmbase/
  20. vmclient/
  21. zipfuse/
  22. rustfmt.toml ⇨ ../../../build/soong/scripts/rustfmt.toml
  23. .clang-format
  24. .gitignore
  25. Android.bp
  26. OWNERS
  27. PREUPLOAD.cfg
  28. README.md
  29. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.