| commit | 82f5f6fdf1e4841410e50bcb03b1a77f46300dd2 | [log] [tgz] |
|---|---|---|
| author | Andrew Scull <ascull@google.com> | Wed Jun 04 10:46:05 2025 -0700 |
| committer | Andrew Scull <ascull@google.com> | Wed Jun 04 13:40:51 2025 -0700 |
| tree | d34619ec807165127fa1730849ee0c8ea4d08ece | |
| parent | f82a875c7d7267f7473b5261dbda30215c7e1f7a [diff] |
Pin the adb APEX version as well in debuggable VMs Prevent rollbacks from causing an issue based on the version. The adb APEX is added automatically to debuggable VMs so limit this to only debuggable VMs as the matching string of "adb" is very short. This change is only meant to target the appsearch VM but it will impact every debuggable VM; fortunately there are no security guarantees of a debuggable VM. Use a version that is greater than the latest APEX version of ~362000000 so that devices can upgrade to this new behaviour without causing a DICE policy error and so can retain their data. 400000004 is also chosen to be distinctive enough to indicate this imperfect workaround by alerting one's inner tetraphobe. Bug: 421488144 # for issue Bug: 414312074 # for previous appsearch issue Bug: 414602022 # for longterm fix for this Test: Flash this build, then old build and see policy error with the version of adbd from this CL. Flag: EXEMPT bugfix Change-Id: If0fb7e9472ed6d57226dbf95796c7680c0670f1f
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: