9ee4591cb4
This commit allows users to create a link without soname filters between
two linker namespaces.
The motivation is to establish one-way shared library isolation. For
example, assume that there are two linker namespaces `default` and
`vndk`. We would like to limit the shared libraries that can be used by
the `default` namespace. In the meanwhile, we would like to allow the
`vndk` namespace to use shared libs from the `default` namespace if the
soname cannot be find in the search path or loaded sonames of the `vndk`
namespace.
shared_libs = %VNDK_CORE_LIBRARIES%
shared_libs += %VNDK_SAMEPROCESS_LIBRARIES%
vndk <-------------------------------------------- default
\_______________________________________________/^
allow_all_shared_libs = true
android_link_namespaces_all_libs() is added to libdl, but it is
versioned as LIBC_PRIVATE. android_link_namespaces_all_libs() is only
for unit tests.
Bug: 69824336
Test: adb shell /data/nativetest/linker-unit-tests/linker-unit-tests32
Test: adb shell /data/nativetest64/linker-unit-tests/linker-unit-tests64
Test: adb shell /data/nativetest/bionic-unit-tests/bionic-unit-tests
Test: adb shell /data/nativetest64/bionic-unit-tests/bionic-unit-tests
Test: Update /system/etc/ld.config*.txt and check whether the vndk
linker namespace of the vendor process can access the shared libs from
the default linker namespace.
Change-Id: I2879f0c5f5af60c7e56f8f743ebd2872e552286b
105 lines
4.7 KiB
C
105 lines
4.7 KiB
C
/*
|
|
* Copyright (C) 2016 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef __ANDROID_DLEXT_NAMESPACES_H__
|
|
#define __ANDROID_DLEXT_NAMESPACES_H__
|
|
|
|
#include <android/dlext.h>
|
|
|
|
__BEGIN_DECLS
|
|
|
|
/*
|
|
* Initializes anonymous namespaces. The shared_libs_sonames is the list of sonames
|
|
* to be shared by default namespace separated by colon. Example: "libc.so:libm.so:libdl.so".
|
|
*
|
|
* The library_search_path is the search path for anonymous namespace. The anonymous namespace
|
|
* is used in the case when linker cannot identify the caller of dlopen/dlsym. This happens
|
|
* for the code not loaded by dynamic linker; for example calls from the mono-compiled code.
|
|
*/
|
|
extern bool android_init_anonymous_namespace(const char* shared_libs_sonames,
|
|
const char* library_search_path);
|
|
|
|
|
|
enum {
|
|
/* A regular namespace is the namespace with a custom search path that does
|
|
* not impose any restrictions on the location of native libraries.
|
|
*/
|
|
ANDROID_NAMESPACE_TYPE_REGULAR = 0,
|
|
|
|
/* An isolated namespace requires all the libraries to be on the search path
|
|
* or under permitted_when_isolated_path. The search path is the union of
|
|
* ld_library_path and default_library_path.
|
|
*/
|
|
ANDROID_NAMESPACE_TYPE_ISOLATED = 1,
|
|
|
|
/* The shared namespace clones the list of libraries of the caller namespace upon creation
|
|
* which means that they are shared between namespaces - the caller namespace and the new one
|
|
* will use the same copy of a library if it was loaded prior to android_create_namespace call.
|
|
*
|
|
* Note that libraries loaded after the namespace is created will not be shared.
|
|
*
|
|
* Shared namespaces can be isolated or regular. Note that they do not inherit the search path nor
|
|
* permitted_path from the caller's namespace.
|
|
*/
|
|
ANDROID_NAMESPACE_TYPE_SHARED = 2,
|
|
|
|
/* This flag instructs linker to enable grey-list workaround for the namespace.
|
|
* See http://b/26394120 for details.
|
|
*/
|
|
ANDROID_NAMESPACE_TYPE_GREYLIST_ENABLED = 0x08000000,
|
|
|
|
ANDROID_NAMESPACE_TYPE_SHARED_ISOLATED = ANDROID_NAMESPACE_TYPE_SHARED |
|
|
ANDROID_NAMESPACE_TYPE_ISOLATED,
|
|
};
|
|
|
|
/*
|
|
* Creates new linker namespace.
|
|
* ld_library_path and default_library_path represent the search path
|
|
* for the libraries in the namespace.
|
|
*
|
|
* The libraries in the namespace are searched by folowing order:
|
|
* 1. ld_library_path (Think of this as namespace-local LD_LIBRARY_PATH)
|
|
* 2. In directories specified by DT_RUNPATH of the "needed by" binary.
|
|
* 3. deault_library_path (This of this as namespace-local default library path)
|
|
*
|
|
* When type is ANDROID_NAMESPACE_TYPE_ISOLATED the resulting namespace requires all of
|
|
* the libraries to be on the search path or under the permitted_when_isolated_path;
|
|
* the search_path is ld_library_path:default_library_path. Note that the
|
|
* permitted_when_isolated_path path is not part of the search_path and
|
|
* does not affect the search order. It is a way to allow loading libraries from specific
|
|
* locations when using absolute path.
|
|
* If a library or any of its dependencies are outside of the permitted_when_isolated_path
|
|
* and search_path, and it is not part of the public namespace dlopen will fail.
|
|
*/
|
|
extern struct android_namespace_t* android_create_namespace(const char* name,
|
|
const char* ld_library_path,
|
|
const char* default_library_path,
|
|
uint64_t type,
|
|
const char* permitted_when_isolated_path,
|
|
android_namespace_t* parent);
|
|
|
|
extern bool android_link_namespaces(android_namespace_t* from,
|
|
android_namespace_t* to,
|
|
const char* shared_libs_sonames);
|
|
|
|
extern bool android_link_namespaces_all_libs(android_namespace_t* from,
|
|
android_namespace_t* to);
|
|
|
|
extern void android_set_application_target_sdk_version(uint32_t target);
|
|
|
|
__END_DECLS
|
|
|
|
#endif /* __ANDROID_DLEXT_NAMESPACES_H__ */
|