| commit | 451cc9680119f40c0deeb52e74c776055c5bd2db | [log] [tgz] |
|---|---|---|
| author | David Brazdil <dbrazdil@google.com> | Fri Oct 14 14:08:12 2022 +0100 |
| committer | David Brazdil <dbrazdil@google.com> | Tue Nov 15 11:25:38 2022 +0000 |
| tree | 50a694727c74e2c81944704e9bbed734b2de3bac | |
| parent | b28124b02b2de9d0864e4deb53f755023df2c4ef [diff] |
Remove onPayloadStarted stream argument microdroid_manager creates a vsock connection with the host and redirects the payload's stdin/stdout/stderr streams over it. This may not necessarily be a securiy issue if the app never writes any secrets to its standard output, but it would be safer to not open up a communication channel like that by default. If the payload wishes to pass its logs to the host, it should open up the connection explicitly. Remove the vsock connection, the virtualizationservice server and the corresponding file descriptor argument of onPayloadStarted() callback. Instead, provide onPayloadStdio() that the payload can optinally call to set up the connection. Bug: 245727626 Bug: 253221932 Test: atest -p packages/modules/Virtualization:avf-presubmit Change-Id: I89fd3a52aae9272db7300224b88d87c6f4d8a8a7
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.