152 lines
7.9 KiB
Text
152 lines
7.9 KiB
Text
# Copyright (C) 2017 The Android Open Source Project
|
|
#
|
|
# Bionic loader config file.
|
|
#
|
|
|
|
# Don't change the order here. The first pattern that matches with the
|
|
# absolute path of an executable is selected.
|
|
dir.system = /system/bin/
|
|
dir.system = /system/xbin/
|
|
dir.vendor = /vendor/bin/
|
|
dir.vendor = /data/nativetest/vendor
|
|
dir.vendor = /data/nativetest64/vendor
|
|
dir.vendor = /data/benchmarktest/vendor
|
|
dir.vendor = /data/benchmarktest64/vendor
|
|
dir.system = /data/nativetest
|
|
dir.system = /data/nativetest64
|
|
dir.system = /data/benchmarktest
|
|
dir.system = /data/benchmarktest64
|
|
|
|
[system]
|
|
additional.namespaces = sphal,vndk,rs
|
|
|
|
###############################################################################
|
|
# "default" namespace
|
|
#
|
|
# Framework-side code runs in this namespace. Libs from /vendor partition
|
|
# can't be loaded in this namespace.
|
|
###############################################################################
|
|
namespace.default.isolated = true
|
|
# TODO(b/63553457): remove /vendor/lib from the search path. For now, this is
|
|
# required since the classloader namespace for vendor apks should have access
|
|
# vendor libraries in the directory. These search paths are copied to the search
|
|
# paths of the classloader namespace.
|
|
namespace.default.search.paths = /system/${LIB}:/vendor/${LIB}
|
|
# /vendor/app, /vendor/framework were added since libart should be able to dlopen
|
|
# the odex files from the directory.
|
|
namespace.default.permitted.paths = /system/${LIB}/drm:/system/${LIB}/hw:/system/framework:/system/app:/system/priv-app:/vendor/app:/vendor/framework:/oem/app:/data:/mnt/expand
|
|
|
|
namespace.default.asan.search.paths = /data/asan/system/${LIB}:/system/${LIB}:/data/asan/vendor/${LIB}:/vendor/${LIB}
|
|
namespace.default.asan.permitted.paths = /data:/system/${LIB}/drm:/system/${LIB}/hw:/system/framework:/system/app:/system/priv-app:/vendor/app:/vendor/framework:/oem/app:/mnt/expand
|
|
|
|
###############################################################################
|
|
# "sphal" namespace
|
|
#
|
|
# SP-HAL(Sameprocess-HAL)s are the only vendor libraries that are allowed to be
|
|
# loaded inside system processes. libEGL_<chipset>.so, libGLESv2_<chipset>.so,
|
|
# android.hardware.graphics.mapper@2.0-impl.so, etc are SP-HALs.
|
|
#
|
|
# This namespace is exclusivly for SP-HALs. When the framework tries to dynami-
|
|
# cally load SP-HALs, android_dlopen_ext() is used to explicitly specifying
|
|
# that they should be searched and loaded from this namespace.
|
|
#
|
|
# Note that there is no link from the default namespace to this namespace.
|
|
###############################################################################
|
|
namespace.sphal.isolated = true
|
|
namespace.sphal.visible = true
|
|
namespace.sphal.search.paths = /vendor/${LIB}/egl:/vendor/${LIB}/hw:/vendor/${LIB}
|
|
namespace.sphal.permitted.paths = /vendor/${LIB}:/system/${LIB}/vndk-sp/hw
|
|
|
|
namespace.sphal.asan.search.paths = /data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl:/data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}:/vendor/${LIB}
|
|
namespace.sphal.asan.permitted.paths = /data/asan/vendor/${LIB}:/vendor/${LIB}
|
|
|
|
# Once in this namespace, access to libraries in /system/lib is restricted. Only
|
|
# libs listed here can be used.
|
|
namespace.sphal.links = default,vndk,rs
|
|
|
|
# WARNING: only NDK libs can be listed here.
|
|
namespace.sphal.link.default.shared_libs = %LLNDK_LIBRARIES%:%SANITIZER_RUNTIME_LIBRARIES%
|
|
|
|
# WARNING: only VNDK-SP libs can be listed here. DO NOT EDIT this line.
|
|
namespace.sphal.link.vndk.shared_libs = %VNDK_SAMEPROCESS_LIBRARIES%
|
|
|
|
# Renderscript gets separate namespace
|
|
namespace.sphal.link.rs.shared_libs = libRS_internal.so
|
|
|
|
###############################################################################
|
|
# "rs" namespace
|
|
#
|
|
# This namespace is exclusively for Renderscript internal libraries.
|
|
# This namespace has slightly looser restriction than the vndk namespace because
|
|
# of the genuine characteristics of Renderscript; /data is in the permitted path
|
|
# to load the compiled *.so file and libmediandk.so can be used here.
|
|
###############################################################################
|
|
namespace.rs.isolated = true
|
|
namespace.rs.visible = true
|
|
namespace.rs.search.paths = /vendor/${LIB}/vndk-sp:/system/${LIB}/vndk-sp:/vendor/${LIB}
|
|
namespace.rs.permitted.paths = /vendor/${LIB}:/data
|
|
|
|
namespace.rs.asan.search.paths = /data/asan/vendor/${LIB}/vndk-sp:/vendor/${LIB}/vndk-sp:/data/asan/system/${LIB}/vndk-sp:/system/${LIB}/vndk-sp:/data/asan/vendor/${LIB}:/vendor/${LIB}
|
|
namespace.rs.asan.permitted.paths = /data/asan/vendor/${LIB}:/vendor/${LIB}:/data
|
|
|
|
namespace.rs.links = default,vndk
|
|
namespace.rs.link.default.shared_libs = %LLNDK_LIBRARIES%:%SANITIZER_RUNTIME_LIBRARIES%
|
|
namespace.rs.link.vndk.shared_libs = %VNDK_SAMEPROCESS_LIBRARIES%
|
|
|
|
###############################################################################
|
|
# "vndk" namespace
|
|
#
|
|
# This namespace is exclusively for vndk-sp libs.
|
|
###############################################################################
|
|
namespace.vndk.isolated = true
|
|
namespace.vndk.search.paths = /vendor/${LIB}/vndk-sp:/system/${LIB}/vndk-sp
|
|
namespace.vndk.permitted.paths = /vendor/${LIB}/hw:/vendor/${LIB}/egl
|
|
|
|
namespace.vndk.asan.search.paths = /data/asan/vendor/${LIB}/vndk-sp:/vendor/${LIB}/vndk-sp:/data/asan/system/${LIB}/vndk-sp:/system/${LIB}/vndk-sp
|
|
namespace.vndk.asan.permitted.paths = /data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl
|
|
|
|
# When these NDK libs are required inside this namespace, then it is redirected
|
|
# to the default namespace. This is possible since their ABI is stable across
|
|
# Android releases.
|
|
namespace.vndk.links = default
|
|
namespace.vndk.link.default.shared_libs = %LLNDK_LIBRARIES%:%SANITIZER_RUNTIME_LIBRARIES%
|
|
|
|
###############################################################################
|
|
# Namespace config for vendor processes. In O, no restriction is enforced for
|
|
# them. However, in O-MR1, access to /system/${LIB} will not be allowed to
|
|
# the default namespace. 'system' namespace will be added to give limited
|
|
# (LL-NDK only) access.
|
|
###############################################################################
|
|
[vendor]
|
|
additional.namespaces = system
|
|
|
|
###############################################################################
|
|
# "default" namespace
|
|
#
|
|
# Vendor-side code runs in this namespace.
|
|
###############################################################################
|
|
namespace.default.isolated = true
|
|
namespace.default.visible = true
|
|
|
|
namespace.default.search.paths = /vendor/${LIB}/hw:/vendor/${LIB}/egl:/vendor/${LIB}:/vendor/${LIB}/vndk:/system/${LIB}/vndk:/vendor/${LIB}/vndk-sp:/system/${LIB}/vndk-sp
|
|
namespace.default.permitted.paths = /vendor:/system/${LIB}/vndk:/system/${LIB}/vndk-sp
|
|
|
|
namespace.default.asan.search.paths = /data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl:/data/asan/vendor/${LIB}:/vendor/${LIB}:/data/asan/vendor/${LIB}/vndk:/vendor/${LIB}/vndk:/data/asan/system/${LIB}/vndk:/system/${LIB}/vndk:/data/asan/vendor/${LIB}/vndk-sp:/vendor/${LIB}/vndk-sp:/data/asan/system/${LIB}/vndk-sp:/system/${LIB}/vndk-sp
|
|
namespace.default.asan.permitted.paths = /data/asan/vendor:/vendor:/data/asan/system/${LIB}/vndk:/system/${LIB}/vndk:/data/asan/system/${LIB}/vndk-sp:/system/${LIB}/vndk-sp
|
|
|
|
namespace.default.links = system
|
|
namespace.default.link.system.shared_libs = %LLNDK_LIBRARIES%:libmedia.so:libandroid_runtime.so
|
|
# libmedia.so must be removed after we have fix for lib-dplmedia.so (b/64427765)
|
|
# libandroid_runtime.so must be removed after we have a fix for qseeproxydaemon (b/64820887)
|
|
|
|
###############################################################################
|
|
# "system" namespace
|
|
#
|
|
# This is for vendor process to use LL-NDK in system partition.
|
|
###############################################################################
|
|
namespace.system.isolated = false
|
|
namespace.system.search.paths = /system/${LIB}
|
|
namespace.system.permitted.paths = /system/${LIB}
|
|
|
|
namespace.system.asan.search.paths = /data/asan/system/${LIB}:/system/${LIB}
|
|
namespace.system.asan.permitted.paths = /data/asan/system/${LIB}:/system/${LIB}
|