Commit graph

91447 commits

Author SHA1 Message Date
T.J. Mercier
fdd861ef7e debuggerd: Use libprocessgroup to unfreeze
Cgroup v2 paths are owned by libprocessgroup. Those paths can change
based on build flags, so paths generated outside of libprocessgroup may
not always be correct.

Bug: 382693152
Test: adb shell debuggerd -b <pid>
Change-Id: I7e486ab6f4068d0fae1be033a91b9a307f54ed42
2024-12-06 17:52:29 +00:00
Jihoon Kang
09e7cea7c1 Define toolbox.recovery
By removing `recovery_available` property from "toolbox" and defining a
dedicated recovery-specific module for "toolbox". `recovery_available`
property should be used to allow the reverse dependencies recovery
modules to depend on the module, not to install the module to the
recovery partition.

Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: I8e1bbf56aaf5ba4a761d84e60afa420ba6f825b9
2024-12-06 01:51:35 +00:00
Android Build Coastguard Worker
54d2ccaf3e Snap for 12755599 from bb7d3aa6fe to 25Q1-release
Change-Id: I83628795cd37ca0cf262b8bd50ef165a36396d8a
2024-12-06 00:20:00 +00:00
Treehugger Robot
a7f3ec3e3f Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7 am: bc2895cb84
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539

Change-Id: I10c966d9d4984f4885839746e57d2a50fcfa53eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 21:11:01 +00:00
Treehugger Robot
bc2895cb84 Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539

Change-Id: I7e5ed9648ea5f9b256ae76cddfdae011e5bce2ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 20:47:22 +00:00
Treehugger Robot
7d90faa8b7 Merge "Replace partition-specific toybox make module with soong modules" into main 2024-12-05 20:24:08 +00:00
Jihoon Kang
44eca61ab9 Replace partition-specific toybox make module with soong modules
toybox no longer sets recovery_available
property, thus this make module is no longer generated. Thus,
replace the entry with the soong modules to prevent missing
dependencies make error.

This change also specifies `recovery` property in
shell_and_utilities_recovery to allow soong generated recovery partition
to correctly install the dependencies of the phony module.

Test: m nothing
Bug: 381888358
Change-Id: I314e8031d23a9f579101ca1d5499969af4e3a9d3
2024-12-05 18:50:11 +00:00
Treehugger Robot
bb7d3aa6fe Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621 am: 30935be2b2
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007

Change-Id: I2f8f03e12dbe67f504a9ef287997927e57546c28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 08:15:59 +00:00
Treehugger Robot
30935be2b2 Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007

Change-Id: Ife3eecf4b55e3a6d108b5e8e62256116447b0c9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 07:51:47 +00:00
Treehugger Robot
8186c63621 Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main 2024-12-05 07:25:38 +00:00
Android Build Coastguard Worker
3cc79f9b72 Snap for 12748980 from 1cfbb8a4e7 to 25Q1-release
Change-Id: I7767faa8a98bfa24305f01530b316d82053e1c5b
2024-12-05 00:20:17 +00:00
Treehugger Robot
0d60df64c0 Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2 am: 131fb17876
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499

Change-Id: I0745b3ab3026bf10e3d657815502ef8be7bd889e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 22:13:43 +00:00
Treehugger Robot
131fb17876 Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499

Change-Id: Iabab95513c63353dcbc99ed9a3f44a216b8759fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 21:50:54 +00:00
Treehugger Robot
43772f2bc2 Merge "Update trusty to use secretkeeper hal V1" into main 2024-12-04 21:22:00 +00:00
Dennis Shen
1cfbb8a4e7 Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b am: 30650d6d57
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475

Change-Id: I6b88a8f5c21687bacc15c6c4480897f50135fdbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 16:21:44 +00:00
Dennis Shen
30650d6d57 Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475

Change-Id: I6180d86db5c2ed8bba8664f741d00df08ebfcf0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 15:57:02 +00:00
Dennis Shen
894577050b Merge "Start aconfigd socket defined in configinfra mainline module" into main 2024-12-04 15:17:58 +00:00
Treehugger Robot
b1292185d9 Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0 am: 4f6c94845f
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411

Change-Id: I5a121863f409178e7d48f0c08205fef34ddffe36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 04:18:40 +00:00
Treehugger Robot
4f6c94845f Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411

Change-Id: Ic6ae4769ad553b5be19413661919fb79e2a5ad22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 03:54:18 +00:00
Treehugger Robot
63051ccde0 Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main 2024-12-04 03:18:05 +00:00
Android Build Coastguard Worker
55ad06f5f7 Snap for 12742097 from fd1e8b2f10 to 25Q1-release
Change-Id: I24867db4c57e6d4f19745fba13adb6039e6708d8
2024-12-04 00:20:41 +00:00
Dennis Shen
683e3c0761 Start aconfigd socket defined in configinfra mainline module
Context: to have better future updatability. The responsiblity of
managing mainline module storage files and a socket service for flag
overrides will be moved to the configinfra mainline module. Later,
aconfigd on /system will only be repsopnsbile for managing platform
partition storage files.

Bug: b/369810972
Test: m, launch avd and then inspect the logcat log to confirm the
service is launched.

Change-Id: I490e5aa432fa4afa236689ad0999e5602f7d297e
2024-12-03 23:52:00 +00:00
Isaac Manjarres
056fd98b49 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025 am: 54fcd05250
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580

Change-Id: I23159135ac258a71074d3d6e66ae58c95f0d190a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:48:51 +00:00
Matt Gilbride
7a1cf9a52d Update trusty to use secretkeeper hal V1
The HAL has been updated to V2, but the trusty prebuilt implementation
does not yet have that code. Update trusty secretkeeper build to use V1
specifically instead of latest until the prebuilt has those changes.

Bug: 372223451
Test: TH
Change-Id: Ic2e9b578b50685d71b5597d8d34ac7ee36b6ddc9
2024-12-03 23:33:43 +00:00
Isaac Manjarres
54fcd05250 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580

Change-Id: I0764f39cae8029a14042d4196287adc870264a89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:25:21 +00:00
Isaac Manjarres
445d2e0025 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main 2024-12-03 22:53:26 +00:00
Treehugger Robot
fd1e8b2f10 Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf am: 0b0b273f42
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571

Change-Id: I50211159a8c118c43bb94a1662d5e2e0ac64bf05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:50:11 +00:00
Isaac J. Manjarres
ee7a713757 ashmem: Ensure all memfds have non-executable permissions by default
Currently, memfds are created with executable permissions, meaning that
one can load a binary into a memfd buffer and use fexecve() to run said
binary. This is not desirable for security reasons, and also does not
match with the behavior that the ashmem driver currently supports.

When the ashmem driver is in use, /dev/ashmem* does not have executable
permissions, so fexecve() cannot be used on those buffers. Linux kernels
6.3+ offer MFD_NOEXEC_SEAL as part of the memfd interface, which allows
one to create memfds with non-executable permissions. Furthermore, the
executable permissions cannot be changed on these memfds.

This matches the expected behavior that ashmem provided, so allow memfd
usage only if MFD_NOEXEC_SEAL is supported, and create memfds with
non-executable permissions by default.

Bug: 111903542
Change-Id: Ibb2c2be3c118ead44fc12bcd2b63dcf6f83c9b03
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>
2024-12-03 10:13:28 -08:00
Treehugger Robot
0b0b273f42 Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571

Change-Id: I82b1d4118294d26033ba8decee4482be71d5bd95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 17:36:16 +00:00
Treehugger Robot
92487860cf Merge "fs_mgr: Support nosymfollow mount option" into main 2024-12-03 17:11:18 +00:00
Android Build Coastguard Worker
7e49be6665 Snap for 12735943 from 91cee386e5 to 25Q1-release
Change-Id: Iaf5f83fb0d59377813c1300092b0ec9fa0354e9d
2024-12-03 00:19:51 +00:00
Treehugger Robot
11c2fedb4d Merge "libsnapshot: Cleanup temp metadata during rollback" into main am: 326534aace am: f670036b82
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388019

Change-Id: I938234657fbe9e3d2b386e8eb7168878a13aa75e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 23:15:26 +00:00
Treehugger Robot
f670036b82 Merge "libsnapshot: Cleanup temp metadata during rollback" into main am: 326534aace
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388019

Change-Id: I49676341c3d86b8ad52c44dd2cc08653d0725b4a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 22:51:58 +00:00
Treehugger Robot
326534aace Merge "libsnapshot: Cleanup temp metadata during rollback" into main 2024-12-02 22:31:01 +00:00
Treehugger Robot
91cee386e5 Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main am: 85050a06e1 am: be00d31ac5
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377032

Change-Id: I453e931f7b63dc958c2b6f7c41839533d7059e6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:45:18 +00:00
Treehugger Robot
be00d31ac5 Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main am: 85050a06e1
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377032

Change-Id: I0f691b82207853c7edd53079c91d1c7e38d67c3b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:20:44 +00:00
Treehugger Robot
85050a06e1 Merge changes I0586f761,I9fc71f9c,I0ad1f449 into main
* changes:
  libprocessgroup: Remove ramdisk_available from libcgrouprc
  libprocessgroup: Remove vendor_ramdisk_available from libcgrouprc
  libprocessgroup: Remove recovery_available from libcgrouprc
2024-12-02 19:03:46 +00:00
Eric Biggers
cc8f563d02 Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main am: 6dc0ed1758 am: a3ce66437c
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377529

Change-Id: Ia69d46ac326a5e99ffd04f79aadadebcd696002d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 19:00:38 +00:00
Akilesh Kailash
00a32314ac libsnapshot: Cleanup temp metadata during rollback
Bug: 380471512
Test: Test rollback and check metadata is cleared
Change-Id: I4ebd5d9842409fa32c58bb482ffc0066817a5a05
Signed-off-by: Akilesh Kailash <akailash@google.com>
2024-12-02 10:58:46 -08:00
Eric Biggers
a3ce66437c Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main am: 6dc0ed1758
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3377529

Change-Id: Id336c8aea1a2abf9cf9d8dfbfcf735109f1103d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 18:38:10 +00:00
Eric Biggers
6dc0ed1758 Merge "Fix the dm-verity Merkle tree caches to not expire so quickly" into main 2024-12-02 18:11:34 +00:00
T.J. Mercier
8972ce18d2 libprocessgroup: Remove ramdisk_available from libcgrouprc
...which no longer appears to be required.

Bug: 349105928
Change-Id: I0586f76147d9519ef6a520a10164e1b0f5e5c9b8
2024-12-02 17:41:12 +00:00
T.J. Mercier
62f8723f67 libprocessgroup: Remove vendor_ramdisk_available from libcgrouprc
...which no longer appears to be required.

Bug: 349105928
Change-Id: I9fc71f9cf3238dcc935da63ce1a3b0b69d9cccc1
2024-12-02 17:41:12 +00:00
T.J. Mercier
f26b13aeb1 libprocessgroup: Remove recovery_available from libcgrouprc
...which no longer appears to be required.

Bug: 349105928
Change-Id: I0ad1f44912fdaf98c05b60402c0166c535155775
2024-12-02 17:41:12 +00:00
Treehugger Robot
ee4959334f Merge "Update comments to point to the new location of event.logtags." into main am: e7a16c3aa0 am: 7aa226893f
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376093

Change-Id: If6c74d92602e1b244a061fa2ef87f3ee421c0bcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 15:35:55 +00:00
Treehugger Robot
7aa226893f Merge "Update comments to point to the new location of event.logtags." into main am: e7a16c3aa0
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376093

Change-Id: Ie9e6be7b00e6a49a0ff4f32bc60066d04e43889d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-02 15:13:49 +00:00
Treehugger Robot
e7a16c3aa0 Merge "Update comments to point to the new location of event.logtags." into main 2024-12-02 14:48:01 +00:00
Akhilesh Sanikop
8366faad18 gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE
Adding signal handler to avoid abort() due to
broken pipe.

Test: ./gatekeeperd_service_fuzzer
Bug: 376201407
Change-Id: Ifca08860d11f56eb8e0d490c6b6956f8774cfa70
2024-11-29 15:02:21 +05:30
Android Build Coastguard Worker
de7a266c9a Snap for 12722466 from e948872d49 to 25Q1-release
Change-Id: If20544e27f70068f46f8d0d356d7b09f5d238b76
2024-11-28 00:19:48 +00:00
Dennis Shen
e948872d49 Merge "Deprecate cc_binary aconfigd and the controlling flag" into main am: db80953238 am: f716e1e0ce
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3376683

Change-Id: Idd94bdbba9e2a76839eccc04efae32b6fc5aafe3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-27 16:16:44 +00:00