T.J. Mercier
fdd861ef7e
debuggerd: Use libprocessgroup to unfreeze
...
Cgroup v2 paths are owned by libprocessgroup. Those paths can change
based on build flags, so paths generated outside of libprocessgroup may
not always be correct.
Bug: 382693152
Test: adb shell debuggerd -b <pid>
Change-Id: I7e486ab6f4068d0fae1be033a91b9a307f54ed42
2024-12-06 17:52:29 +00:00
Jihoon Kang
09e7cea7c1
Define toolbox.recovery
...
By removing `recovery_available` property from "toolbox" and defining a
dedicated recovery-specific module for "toolbox". `recovery_available`
property should be used to allow the reverse dependencies recovery
modules to depend on the module, not to install the module to the
recovery partition.
Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: I8e1bbf56aaf5ba4a761d84e60afa420ba6f825b9
2024-12-06 01:51:35 +00:00
Android Build Coastguard Worker
54d2ccaf3e
Snap for 12755599 from bb7d3aa6fe to 25Q1-release
...
Change-Id: I83628795cd37ca0cf262b8bd50ef165a36396d8a
2024-12-06 00:20:00 +00:00
Treehugger Robot
a7f3ec3e3f
Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7 am: bc2895cb84
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539
Change-Id: I10c966d9d4984f4885839746e57d2a50fcfa53eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 21:11:01 +00:00
Treehugger Robot
bc2895cb84
Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539
Change-Id: I7e5ed9648ea5f9b256ae76cddfdae011e5bce2ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 20:47:22 +00:00
Treehugger Robot
7d90faa8b7
Merge "Replace partition-specific toybox make module with soong modules" into main
2024-12-05 20:24:08 +00:00
Jihoon Kang
44eca61ab9
Replace partition-specific toybox make module with soong modules
...
toybox no longer sets recovery_available
property, thus this make module is no longer generated. Thus,
replace the entry with the soong modules to prevent missing
dependencies make error.
This change also specifies `recovery` property in
shell_and_utilities_recovery to allow soong generated recovery partition
to correctly install the dependencies of the phony module.
Test: m nothing
Bug: 381888358
Change-Id: I314e8031d23a9f579101ca1d5499969af4e3a9d3
2024-12-05 18:50:11 +00:00
Treehugger Robot
bb7d3aa6fe
Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621 am: 30935be2b2
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007
Change-Id: I2f8f03e12dbe67f504a9ef287997927e57546c28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 08:15:59 +00:00
Treehugger Robot
30935be2b2
Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007
Change-Id: Ife3eecf4b55e3a6d108b5e8e62256116447b0c9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 07:51:47 +00:00
Treehugger Robot
8186c63621
Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main
2024-12-05 07:25:38 +00:00
Android Build Coastguard Worker
3cc79f9b72
Snap for 12748980 from 1cfbb8a4e7 to 25Q1-release
...
Change-Id: I7767faa8a98bfa24305f01530b316d82053e1c5b
2024-12-05 00:20:17 +00:00
Treehugger Robot
0d60df64c0
Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2 am: 131fb17876
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499
Change-Id: I0745b3ab3026bf10e3d657815502ef8be7bd889e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 22:13:43 +00:00
Treehugger Robot
131fb17876
Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499
Change-Id: Iabab95513c63353dcbc99ed9a3f44a216b8759fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 21:50:54 +00:00
Treehugger Robot
43772f2bc2
Merge "Update trusty to use secretkeeper hal V1" into main
2024-12-04 21:22:00 +00:00
Dennis Shen
1cfbb8a4e7
Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b am: 30650d6d57
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475
Change-Id: I6b88a8f5c21687bacc15c6c4480897f50135fdbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 16:21:44 +00:00
Dennis Shen
30650d6d57
Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475
Change-Id: I6180d86db5c2ed8bba8664f741d00df08ebfcf0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 15:57:02 +00:00
Dennis Shen
894577050b
Merge "Start aconfigd socket defined in configinfra mainline module" into main
2024-12-04 15:17:58 +00:00
Treehugger Robot
b1292185d9
Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0 am: 4f6c94845f
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411
Change-Id: I5a121863f409178e7d48f0c08205fef34ddffe36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 04:18:40 +00:00
Treehugger Robot
4f6c94845f
Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411
Change-Id: Ic6ae4769ad553b5be19413661919fb79e2a5ad22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 03:54:18 +00:00
Treehugger Robot
63051ccde0
Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main
2024-12-04 03:18:05 +00:00
Android Build Coastguard Worker
55ad06f5f7
Snap for 12742097 from fd1e8b2f10 to 25Q1-release
...
Change-Id: I24867db4c57e6d4f19745fba13adb6039e6708d8
2024-12-04 00:20:41 +00:00
Dennis Shen
683e3c0761
Start aconfigd socket defined in configinfra mainline module
...
Context: to have better future updatability. The responsiblity of
managing mainline module storage files and a socket service for flag
overrides will be moved to the configinfra mainline module. Later,
aconfigd on /system will only be repsopnsbile for managing platform
partition storage files.
Bug: b/369810972
Test: m, launch avd and then inspect the logcat log to confirm the
service is launched.
Change-Id: I490e5aa432fa4afa236689ad0999e5602f7d297e
2024-12-03 23:52:00 +00:00
Isaac Manjarres
056fd98b49
Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025 am: 54fcd05250
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580
Change-Id: I23159135ac258a71074d3d6e66ae58c95f0d190a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:48:51 +00:00
Matt Gilbride
7a1cf9a52d
Update trusty to use secretkeeper hal V1
...
The HAL has been updated to V2, but the trusty prebuilt implementation
does not yet have that code. Update trusty secretkeeper build to use V1
specifically instead of latest until the prebuilt has those changes.
Bug: 372223451
Test: TH
Change-Id: Ic2e9b578b50685d71b5597d8d34ac7ee36b6ddc9
2024-12-03 23:33:43 +00:00
Isaac Manjarres
54fcd05250
Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580
Change-Id: I0764f39cae8029a14042d4196287adc870264a89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:25:21 +00:00
Isaac Manjarres
445d2e0025
Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main
2024-12-03 22:53:26 +00:00
Treehugger Robot
fd1e8b2f10
Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf am: 0b0b273f42
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571
Change-Id: I50211159a8c118c43bb94a1662d5e2e0ac64bf05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:50:11 +00:00
Isaac J. Manjarres
ee7a713757
ashmem: Ensure all memfds have non-executable permissions by default
...
Currently, memfds are created with executable permissions, meaning that
one can load a binary into a memfd buffer and use fexecve() to run said
binary. This is not desirable for security reasons, and also does not
match with the behavior that the ashmem driver currently supports.
When the ashmem driver is in use, /dev/ashmem* does not have executable
permissions, so fexecve() cannot be used on those buffers. Linux kernels
6.3+ offer MFD_NOEXEC_SEAL as part of the memfd interface, which allows
one to create memfds with non-executable permissions. Furthermore, the
executable permissions cannot be changed on these memfds.
This matches the expected behavior that ashmem provided, so allow memfd
usage only if MFD_NOEXEC_SEAL is supported, and create memfds with
non-executable permissions by default.
Bug: 111903542
Change-Id: Ibb2c2be3c118ead44fc12bcd2b63dcf6f83c9b03
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>
2024-12-03 10:13:28 -08:00
Treehugger Robot
0b0b273f42
Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571
Change-Id: I82b1d4118294d26033ba8decee4482be71d5bd95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 17:36:16 +00:00
Treehugger Robot
92487860cf
Merge "fs_mgr: Support nosymfollow mount option" into main
2024-12-03 17:11:18 +00:00
Android Build Coastguard Worker
7e49be6665
Snap for 12735943 from 91cee386e5 to 25Q1-release
...
Change-Id: Iaf5f83fb0d59377813c1300092b0ec9fa0354e9d
2024-12-03 00:19:51 +00:00
Treehugger Robot
11c2fedb4d
Merge "libsnapshot: Cleanup temp metadata during rollback" into main am: 326534aace am: f670036b82
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388019
Change-Id: I938234657fbe9e3d2b386e8eb7168878a13aa75e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 23:15:26 +00:00
Treehugger Robot
f670036b82
Merge "libsnapshot: Cleanup temp metadata during rollback" into main am: 326534aace
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388019
Change-Id: I49676341c3d86b8ad52c44dd2cc08653d0725b4a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 22:51:58 +00:00
Treehugger Robot
326534aace
Merge "libsnapshot: Cleanup temp metadata during rollback" into main
2024-12-02 22:31:01 +00:00
Treehugger Robot
91cee386e5
Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main am: 85050a06e1 am: be00d31ac5
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377032
Change-Id: I453e931f7b63dc958c2b6f7c41839533d7059e6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:45:18 +00:00
Treehugger Robot
be00d31ac5
Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main am: 85050a06e1
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377032
Change-Id: I0f691b82207853c7edd53079c91d1c7e38d67c3b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:20:44 +00:00
Treehugger Robot
85050a06e1
Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main
...
* changes:
libprocessgroup: Remove ramdisk_available from libcgrouprc
libprocessgroup: Remove vendor_ramdisk_available from libcgrouprc
libprocessgroup: Remove recovery_available from libcgrouprc
2024-12-02 19:03:46 +00:00
Eric Biggers
cc8f563d02
Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main am: 6dc0ed1758 am: a3ce66437c
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377529
Change-Id: Ia69d46ac326a5e99ffd04f79aadadebcd696002d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:00:38 +00:00
Akilesh Kailash
00a32314ac
libsnapshot: Cleanup temp metadata during rollback
...
Bug: 380471512
Test: Test rollback and check metadata is cleared
Change-Id: I4ebd5d9842409fa32c58bb482ffc0066817a5a05
Signed-off-by: Akilesh Kailash <akailash@google.com>
2024-12-02 10:58:46 -08:00
Eric Biggers
a3ce66437c
Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main am: 6dc0ed1758
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377529
Change-Id: Id336c8aea1a2abf9cf9d8dfbfcf735109f1103d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 18:38:10 +00:00
Eric Biggers
6dc0ed1758
Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main
2024-12-02 18:11:34 +00:00
T.J. Mercier
8972ce18d2
libprocessgroup: Remove ramdisk_available from libcgrouprc
...
...which no longer appears to be required.
Bug: 349105928
Change-Id: I0586f76147d9519ef6a520a10164e1b0f5e5c9b8
2024-12-02 17:41:12 +00:00
T.J. Mercier
62f8723f67
libprocessgroup: Remove vendor_ramdisk_available from libcgrouprc
...
...which no longer appears to be required.
Bug: 349105928
Change-Id: I9fc71f9cf3238dcc935da63ce1a3b0b69d9cccc1
2024-12-02 17:41:12 +00:00
T.J. Mercier
f26b13aeb1
libprocessgroup: Remove recovery_available from libcgrouprc
...
...which no longer appears to be required.
Bug: 349105928
Change-Id: I0ad1f44912fdaf98c05b60402c0166c535155775
2024-12-02 17:41:12 +00:00
Treehugger Robot
ee4959334f
Merge "Update comments to point to the new location of event.logtags." into main am: e7a16c3aa0 am: 7aa226893f
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376093
Change-Id: If6c74d92602e1b244a061fa2ef87f3ee421c0bcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 15:35:55 +00:00
Treehugger Robot
7aa226893f
Merge "Update comments to point to the new location of event.logtags." into main am: e7a16c3aa0
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376093
Change-Id: Ie9e6be7b00e6a49a0ff4f32bc60066d04e43889d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 15:13:49 +00:00
Treehugger Robot
e7a16c3aa0
Merge "Update comments to point to the new location of event.logtags." into main
2024-12-02 14:48:01 +00:00
Akhilesh Sanikop
8366faad18
gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE
...
Adding signal handler to avoid abort() due to
broken pipe.
Test: ./gatekeeperd_service_fuzzer
Bug: 376201407
Change-Id: Ifca08860d11f56eb8e0d490c6b6956f8774cfa70
2024-11-29 15:02:21 +05:30
Android Build Coastguard Worker
de7a266c9a
Snap for 12722466 from e948872d49 to 25Q1-release
...
Change-Id: If20544e27f70068f46f8d0d356d7b09f5d238b76
2024-11-28 00:19:48 +00:00
Dennis Shen
e948872d49
Merge "Deprecate cc_binary aconfigd and the controlling flag" into main am: db80953238 am: f716e1e0ce
...
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376683
Change-Id: Idd94bdbba9e2a76839eccc04efae32b6fc5aafe3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-27 16:16:44 +00:00