38c2060 - platform/system/zygote

commit	38c2060828b5dd6c6a2c4efdbe70ca5db5e1eb59	[log] [tgz]
author	Chris Wailes <chriswailes@google.com>	Mon Jun 16 17:26:54 2025 -0700
committer	Chris Wailes <chriswailes@google.com>	Wed Jun 18 10:48:25 2025 -0700
tree	e52db271e7af132e6118400b50e7168280212c27
parent	c697c0f24a04eb43f297f3fa0a2edf181420efab [diff]

Drop bounding capabilities as requested

Test: m zygote_all
Test: atest zygote_next_unit_tests zygote_next_integration_test_fd_no_panic
Test: cargo test --features test
Bug: 415208344
Change-Id: Ifdec466757f25bf9d6e0ab2e92c67054be3fc051

capwrap/Android.bp[diff]
capwrap/Cargo.toml[diff]
capwrap/src/lib.rs[diff]
capwrap/src/sys.rs[diff]
zygote/schemas/messages.fbs[diff]
zygote/src/child_process.rs[diff]
zygote/src/config.rs[diff]
zygote/src/messages.rs[diff]
zygote/src/server.rs[diff]

9 files changed

tree: e52db271e7af132e6118400b50e7168280212c27

capwrap/
memmark/
zygote/
zygote-sys/
.gitignore
Android.bp
Cargo.toml
CONTRIB.md
OWNERS
README.md
TASKS.md
TESTING.md

README.md

This project implements a process-server architecture similar to Android's Zygote.

This server is responsible for:

Preloading/initializing shared resources
Maintaining file descriptor hygiene
Forking new processes
Transitioning new processes to appropriate security contexts