| commit | 1338c8a37f294256646c82d04318947c3979710a | [log] [tgz] |
|---|---|---|
| author | Nikita Ioffe <ioffe@google.com> | Fri May 02 15:37:15 2025 +0000 |
| committer | Nikita Ioffe <ioffe@google.com> | Wed May 21 10:16:54 2025 +0000 |
| tree | f35bfb8db505c4c8be00c2f900e44ba597201149 | |
| parent | ed54abb5f062ad01c6f6d2a785bd2d48acf5c30a [diff] |
Run restorecon on /mnt/encryptedstore When working on delay encrypted store setup feature I've noticed that it takes some time for the correct selinux domain to be applied for /mnt/encrtyptedstore. We don't see this problem with the regular usage of the encrypted store because there is enough work happening between encrypted store setup and payload start, however in case of the delay encrypted store feature the VM boot is already done, so this race condition is easier to observe. This patch makes sure that we always run restorecon on /mnt/encryptedstore before executing the payload code. Bug: 406258175 Test: atest MicrodroidTests Flag: build.RELEASE_AVF_SUPPORT_LONG_RUNNING_VMS Change-Id: Ia1571f83080758f96105ccee96bd62e1d42c9ef6
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: