Commit graph

91320 commits

Author SHA1 Message Date
Android Build Coastguard Worker
26bc21d8a5 Snap for 12765415 from 9f2aa253d1 to 25Q1-release
Change-Id: I10fbbf2b705dfa8ed8205b58dcc8982137e7bf2a
2024-12-07 23:21:53 +00:00
Treehugger Robot
9f2aa253d1 Merge "Define ueventd.rc.recovery" into main am: 4e13819dbd am: 73b5df1087
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392667

Change-Id: I6794e6066128ed3355e69fefb411a03ddc25905c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 02:32:12 +00:00
Treehugger Robot
7809af2c6c Merge "Define init_second_stage.recovery" into main am: 943e7a1ebe am: 3d2f180f2a
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392666

Change-Id: Ifabb63dfeb754e3c706ddc0d6d78c1ae63a107c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 02:31:51 +00:00
Android Build Coastguard Worker
31ca003392 Snap for 12763142 from 5c3092bc25 to 25Q1-release
Change-Id: Idf0f6218bbc87b44761ebeb59b56ddf7b59ad83a
2024-12-07 02:21:11 +00:00
Treehugger Robot
73b5df1087 Merge "Define ueventd.rc.recovery" into main am: 4e13819dbd
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392667

Change-Id: I7e641ff44a7462d6470cde1b74f7b8b40ac76eb8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 02:06:45 +00:00
Treehugger Robot
3d2f180f2a Merge "Define init_second_stage.recovery" into main am: 943e7a1ebe
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392666

Change-Id: I1441ed7f487b403f1ba0b1f17c983840a5c116f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 02:06:36 +00:00
Treehugger Robot
5592ff3dc2 Merge "Define reboot.recovery and watchdogd.recovery" into main am: 625bf70162 am: 023eb1f781
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392637

Change-Id: I7a8b1b3c974e48147fbef2462a17ca155fa55f3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 01:44:45 +00:00
Treehugger Robot
4e13819dbd Merge "Define ueventd.rc.recovery" into main 2024-12-07 01:38:26 +00:00
Treehugger Robot
943e7a1ebe Merge "Define init_second_stage.recovery" into main 2024-12-07 01:37:45 +00:00
Treehugger Robot
023eb1f781 Merge "Define reboot.recovery and watchdogd.recovery" into main am: 625bf70162
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392637

Change-Id: I7a05bb69527cb9aa4b196e5c358b921f682ac6e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-07 01:23:08 +00:00
Treehugger Robot
625bf70162 Merge "Define reboot.recovery and watchdogd.recovery" into main 2024-12-07 00:53:47 +00:00
Jihoon Kang
f9b38f91ac Define ueventd.rc.recovery
By removing `recovery_available` property from "ueventd.rc" and
defining a dedicated recovery-specific module for "ueventd.rc".
`recovery_available` property should be used to allow the reverse
dependencies recovery modules to depend on the module, not to
install the module to the recovery partition.

Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: I6921cae72a1757e065003efc9d77241625f645e9
2024-12-06 23:53:38 +00:00
Jihoon Kang
9b5c6fdce8 Define init_second_stage.recovery
By removing `recovery_available` property from "init_second_stage"
and defining a dedicated recovery-specific module for
"init_second_stage". `recovery_available` property should be used
to allow the reverse dependencies recovery modules to depend on
the module, not to install the module to the recovery partition.

Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: Ie9b93b8453bc1e40f7a28e57f498313d3bc4cedb
2024-12-06 23:33:42 +00:00
Jihoon Kang
2e581b68c6 Define reboot.recovery and watchdogd.recovery
By removing the "recovery_available" property from "reboot" and
"watchdogd" modules.
"recovery_available" property should be used to allow the reverse
dependencies recovery modules to depend on the module, not to
install the module to the recovery partition.

Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: I48014774714957885f3ad648ac302cc3c13687ae
2024-12-06 23:18:18 +00:00
Treehugger Robot
5c3092bc25 Merge "Define toolbox.recovery" into main am: e74001be6f am: c59d10d92e
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392350

Change-Id: I956dfa1c9aa8e39d3b9684782c8d730ecac83fb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 20:40:06 +00:00
Treehugger Robot
6af194a003 Merge "debuggerd: Use libprocessgroup to unfreeze" into main am: 58e219c12a am: 6a734e6b72
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3395660

Change-Id: I47ae7e388f0665f2637501f7d6a06980c1cab402
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 20:39:42 +00:00
Treehugger Robot
c59d10d92e Merge "Define toolbox.recovery" into main am: e74001be6f
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3392350

Change-Id: Ibfc87c4de3f2edebbba7667a78b7615ccf86c5e9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 20:16:32 +00:00
Treehugger Robot
6a734e6b72 Merge "debuggerd: Use libprocessgroup to unfreeze" into main am: 58e219c12a
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3395660

Change-Id: Ifb3d6547c6fac6e35d4ec4684b58de556300aeb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 20:15:39 +00:00
Treehugger Robot
e74001be6f Merge "Define toolbox.recovery" into main 2024-12-06 20:04:05 +00:00
Treehugger Robot
58e219c12a Merge "debuggerd: Use libprocessgroup to unfreeze" into main 2024-12-06 19:48:09 +00:00
T.J. Mercier
fdd861ef7e debuggerd: Use libprocessgroup to unfreeze
Cgroup v2 paths are owned by libprocessgroup. Those paths can change
based on build flags, so paths generated outside of libprocessgroup may
not always be correct.

Bug: 382693152
Test: adb shell debuggerd -b <pid>
Change-Id: I7e486ab6f4068d0fae1be033a91b9a307f54ed42
2024-12-06 17:52:29 +00:00
Jihoon Kang
09e7cea7c1 Define toolbox.recovery
By removing `recovery_available` property from "toolbox" and defining a
dedicated recovery-specific module for "toolbox". `recovery_available`
property should be used to allow the reverse dependencies recovery
modules to depend on the module, not to install the module to the
recovery partition.

Test: m soong_generated_recovery_filesystem_test
Bug: 381888358
Change-Id: I8e1bbf56aaf5ba4a761d84e60afa420ba6f825b9
2024-12-06 01:51:35 +00:00
Android Build Coastguard Worker
54d2ccaf3e Snap for 12755599 from bb7d3aa6fe to 25Q1-release
Change-Id: I83628795cd37ca0cf262b8bd50ef165a36396d8a
2024-12-06 00:20:00 +00:00
Treehugger Robot
a7f3ec3e3f Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7 am: bc2895cb84
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539

Change-Id: I10c966d9d4984f4885839746e57d2a50fcfa53eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 21:11:01 +00:00
Treehugger Robot
bc2895cb84 Merge "Replace partition-specific toybox make module with soong modules" into main am: 7d90faa8b7
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3393539

Change-Id: I7e5ed9648ea5f9b256ae76cddfdae011e5bce2ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 20:47:22 +00:00
Treehugger Robot
7d90faa8b7 Merge "Replace partition-specific toybox make module with soong modules" into main 2024-12-05 20:24:08 +00:00
Jihoon Kang
44eca61ab9 Replace partition-specific toybox make module with soong modules
toybox no longer sets recovery_available
property, thus this make module is no longer generated. Thus,
replace the entry with the soong modules to prevent missing
dependencies make error.

This change also specifies `recovery` property in
shell_and_utilities_recovery to allow soong generated recovery partition
to correctly install the dependencies of the phony module.

Test: m nothing
Bug: 381888358
Change-Id: I314e8031d23a9f579101ca1d5499969af4e3a9d3
2024-12-05 18:50:11 +00:00
Treehugger Robot
bb7d3aa6fe Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621 am: 30935be2b2
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007

Change-Id: I2f8f03e12dbe67f504a9ef287997927e57546c28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 08:15:59 +00:00
Treehugger Robot
30935be2b2 Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main am: 8186c63621
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3382007

Change-Id: Ife3eecf4b55e3a6d108b5e8e62256116447b0c9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-05 07:51:47 +00:00
Treehugger Robot
8186c63621 Merge "gatekeeperd_service_fuzzer: Add signal() to handle SIGPIPE" into main 2024-12-05 07:25:38 +00:00
Android Build Coastguard Worker
3cc79f9b72 Snap for 12748980 from 1cfbb8a4e7 to 25Q1-release
Change-Id: I7767faa8a98bfa24305f01530b316d82053e1c5b
2024-12-05 00:20:17 +00:00
Treehugger Robot
0d60df64c0 Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2 am: 131fb17876
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499

Change-Id: I0745b3ab3026bf10e3d657815502ef8be7bd889e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 22:13:43 +00:00
Treehugger Robot
131fb17876 Merge "Update trusty to use secretkeeper hal V1" into main am: 43772f2bc2
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3390499

Change-Id: Iabab95513c63353dcbc99ed9a3f44a216b8759fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 21:50:54 +00:00
Treehugger Robot
43772f2bc2 Merge "Update trusty to use secretkeeper hal V1" into main 2024-12-04 21:22:00 +00:00
Dennis Shen
1cfbb8a4e7 Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b am: 30650d6d57
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475

Change-Id: I6b88a8f5c21687bacc15c6c4480897f50135fdbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 16:21:44 +00:00
Dennis Shen
30650d6d57 Merge "Start aconfigd socket defined in configinfra mainline module" into main am: 894577050b
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3284475

Change-Id: I6180d86db5c2ed8bba8664f741d00df08ebfcf0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 15:57:02 +00:00
Dennis Shen
894577050b Merge "Start aconfigd socket defined in configinfra mainline module" into main 2024-12-04 15:17:58 +00:00
Treehugger Robot
b1292185d9 Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0 am: 4f6c94845f
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411

Change-Id: I5a121863f409178e7d48f0c08205fef34ddffe36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 04:18:40 +00:00
Treehugger Robot
4f6c94845f Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main am: 63051ccde0
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3369411

Change-Id: Ic6ae4769ad553b5be19413661919fb79e2a5ad22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-04 03:54:18 +00:00
Treehugger Robot
63051ccde0 Merge "trusty: utils: rpmb_dev: secure storage support for test VM" into main 2024-12-04 03:18:05 +00:00
Android Build Coastguard Worker
55ad06f5f7 Snap for 12742097 from fd1e8b2f10 to 25Q1-release
Change-Id: I24867db4c57e6d4f19745fba13adb6039e6708d8
2024-12-04 00:20:41 +00:00
Dennis Shen
683e3c0761 Start aconfigd socket defined in configinfra mainline module
Context: to have better future updatability. The responsiblity of
managing mainline module storage files and a socket service for flag
overrides will be moved to the configinfra mainline module. Later,
aconfigd on /system will only be repsopnsbile for managing platform
partition storage files.

Bug: b/369810972
Test: m, launch avd and then inspect the logcat log to confirm the
service is launched.

Change-Id: I490e5aa432fa4afa236689ad0999e5602f7d297e
2024-12-03 23:52:00 +00:00
Isaac Manjarres
056fd98b49 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025 am: 54fcd05250
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580

Change-Id: I23159135ac258a71074d3d6e66ae58c95f0d190a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:48:51 +00:00
Matt Gilbride
7a1cf9a52d Update trusty to use secretkeeper hal V1
The HAL has been updated to V2, but the trusty prebuilt implementation
does not yet have that code. Update trusty secretkeeper build to use V1
specifically instead of latest until the prebuilt has those changes.

Bug: 372223451
Test: TH
Change-Id: Ic2e9b578b50685d71b5597d8d34ac7ee36b6ddc9
2024-12-03 23:33:43 +00:00
Isaac Manjarres
54fcd05250 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main am: 445d2e0025
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3388580

Change-Id: I0764f39cae8029a14042d4196287adc870264a89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 23:25:21 +00:00
Isaac Manjarres
445d2e0025 Merge "ashmem: Ensure all memfds have non-executable permissions by default" into main 2024-12-03 22:53:26 +00:00
Treehugger Robot
fd1e8b2f10 Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf am: 0b0b273f42
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571

Change-Id: I50211159a8c118c43bb94a1662d5e2e0ac64bf05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:50:11 +00:00
Isaac J. Manjarres
ee7a713757 ashmem: Ensure all memfds have non-executable permissions by default
Currently, memfds are created with executable permissions, meaning that
one can load a binary into a memfd buffer and use fexecve() to run said
binary. This is not desirable for security reasons, and also does not
match with the behavior that the ashmem driver currently supports.

When the ashmem driver is in use, /dev/ashmem* does not have executable
permissions, so fexecve() cannot be used on those buffers. Linux kernels
6.3+ offer MFD_NOEXEC_SEAL as part of the memfd interface, which allows
one to create memfds with non-executable permissions. Furthermore, the
executable permissions cannot be changed on these memfds.

This matches the expected behavior that ashmem provided, so allow memfd
usage only if MFD_NOEXEC_SEAL is supported, and create memfds with
non-executable permissions by default.

Bug: 111903542
Change-Id: Ibb2c2be3c118ead44fc12bcd2b63dcf6f83c9b03
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>
2024-12-03 10:13:28 -08:00
Treehugger Robot
0b0b273f42 Merge "fs_mgr: Support nosymfollow mount option" into main am: 92487860cf
Original change: https://android-review.googlesource.com/c/platform/system/core/+/3368571

Change-Id: I82b1d4118294d26033ba8decee4482be71d5bd95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 17:36:16 +00:00
Treehugger Robot
92487860cf Merge "fs_mgr: Support nosymfollow mount option" into main 2024-12-03 17:11:18 +00:00