| commit | 880e7a74d5cec3b40afae34b65f83b03f1049369 | [log] [tgz] |
|---|---|---|
| author | Isaac J. Manjarres <isaacmanjarres@google.com> | Fri Aug 08 00:00:35 2025 +0000 |
| committer | Isaac J. Manjarres <isaacmanjarres@google.com> | Wed Aug 13 19:24:19 2025 +0000 |
| tree | 5a9e066182511b4ea22c1825ea1aac707f6a614d | |
| parent | c24028d103e6f98533e1030677323c9979b6ebc5 [diff] |
virtmgr: Use rodata=on kernel command line parameter for appsearch VM The rodata feature allows the linear mapping to be updated to read-only to match the virtual mapping to eliminate the possibility of the data being overwritten. However, this comes at the cost of having to map RAM down to the base page size, instead of using block mappings, which results in additional memory usage for pagetables. Additionally, the number of pagetable entries can cause additional TLB pressure and degrade performance. Use rodata=on for the appsearch VM, since it protects the kernel image's read-only section from being written to, and has most of the security benefits as using rodata=full. It also means that we don't have to map RAM to the base page size, which means we can save memory. Bug: 437196556 Flag: EXEMPT ... Change-Id: I17b1e9969230baab933818ea12a0d6b710a8ee28
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: