| commit | e1d9e8fdd7e37670bcb844dbfbf76305dd90ff50 | [log] [tgz] |
|---|---|---|
| author | Pierre-Clément Tosi <ptosi@google.com> | Mon Jan 27 20:51:12 2025 +0000 |
| committer | Pierre-Clément Tosi <ptosi@google.com> | Thu Jul 24 10:48:31 2025 +0000 |
| tree | 76e8cd6ce71fcead61913e57a87648411efda834 | |
| parent | 7f8332c1070bf73dd71bfe1cce5d008c6a03bb06 [diff] |
pvmfw: Add fixed-digest RBP for desktop TEE VM Define a reserved com.android.virt.name for the TEE VM and detect it in pvmfw to perform fixed-digest rollback protection on platforms that ship the VM or reject payloads with the name on platforms that don't. Distinguish between the 2 by only enabling "platform_has_desktop_trusty" for pvmfw_trusty, for now. Bug: 392628867 Bug: 402505709 Test: m libpvmfw libpvmfw_desktop Test: mmm packages/modules/Virtualization/guest/pvmfw Flag: EXEMPT b/406977494 Change-Id: I5dc574c163041b09338d73b2f9d3fbbfee0114ef
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: