No description
Find a file
Alan Stokes be3db7b7ae Enable vold to set level from user.
We want various per-user directories to have their SELinux MLS level
set to restrict access from other users, as an improvement to user
isolation.

We extend vold_prepare_subdirs to implement this if a flag is
set. vold itself then sets the flag based on a new property,
ro.vold.level_from_user. This is to allow testing of further
incremental work to ensure system apps correctly handle the new
restriction on different devices rather than causing immediate
breakage. Eventually this will go away and the restriction will apply
everywhere.

Bug: 141677108
Test: Manual, with and without propery set.
Change-Id: I8e2207bd94b487bdcc09fd4d80b031027dfea1e3
2020-10-02 14:49:25 +01:00
bench bench: Add fail-fast error path to inodeop_bench 2020-09-18 15:50:04 +00:00
binder/android/os Enable vold to set level from user. 2020-10-02 14:49:25 +01:00
fs Rename casefold/projectid properties (for f2fs). am: e9239f757e 2020-04-17 14:41:07 +00:00
model Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709) 2020-08-27 10:17:42 -07:00
tests [vold] Add argument verification to IncFS methods 2020-03-25 14:33:24 -07:00
.clang-format vold: use system-clang-format 2019-09-16 12:00:40 -07:00
Android.bp Merge "Add '-unstable' to solve ODR violation" 2020-09-11 08:19:44 +00:00
AppFuseUtil.cpp AppFuseUtil: Call ForceUnmount before PrepareDir. 2019-04-09 18:45:32 +01:00
AppFuseUtil.h Extract AppFuse as a util 2018-11-14 07:28:06 +00:00
Benchmark.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
Benchmark.h clang-format many files. 2018-09-18 15:41:22 -07:00
BenchmarkGen.h Abort long-running benchmarks, report progress. 2017-11-07 09:57:12 -07:00
Checkpoint.cpp Add an isCheckpointing() binder call for adb remount. 2020-06-18 16:04:36 -07:00
Checkpoint.h Add an isCheckpointing() binder call for adb remount. 2020-06-18 16:04:36 -07:00
CleanSpec.mk Add an empty CleanSpec.mk 2010-03-08 18:05:25 -08:00
cryptfs.cpp Merge "Don't call block checkpoint functions above dm-default-key" am: 1bb7e8a928 am: 53f1d07339 2020-06-18 22:16:14 +00:00
cryptfs.h Refactor key generation to handle both normal and metadata encryption. 2020-02-14 13:59:06 -08:00
CryptoType.cpp Generalize CryptoType infrastructure 2020-02-14 00:48:27 -08:00
CryptoType.h Generalize CryptoType infrastructure 2020-02-14 00:48:27 -08:00
Devmapper.cpp Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
Devmapper.h Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
EncryptInplace.cpp vold: remove unused code for CONFIG_HW_DISK_ENCRYPTION 2020-09-15 11:57:30 -07:00
EncryptInplace.h Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
FileDeviceUtils.cpp Remove excess logging in secdiscard 2019-03-21 19:13:51 +00:00
FileDeviceUtils.h clang-format many files. 2018-09-18 15:41:22 -07:00
FsCrypt.cpp Enable vold to set level from user. 2020-10-02 14:49:25 +01:00
FsCrypt.h vold: Do not cache CE keys in vold 2020-01-24 00:20:22 +00:00
IdleMaint.cpp Merge "vold: use RAII wake locks" am: b585363d93 2019-06-26 19:43:21 -07:00
IdleMaint.h Add functions to handle idle maintenance 2017-11-14 15:12:30 -08:00
KeyBuffer.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
KeyBuffer.h clang-format many files. 2018-09-18 15:41:22 -07:00
Keymaster.cpp Send earlyBootEnded notice to all Keymasters 2020-04-01 10:04:32 -06:00
Keymaster.h Send earlyBootEnded notice to all Keymasters 2020-04-01 10:04:32 -06:00
KeyStorage.cpp Fix unaligned access to auth token user_id 2020-02-18 11:00:15 -08:00
KeyStorage.h vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
KeyUtil.cpp Merge "KeyUtil: use static local variable in isFsKeyringSupported()" 2020-07-17 01:20:43 +00:00
KeyUtil.h fskeyring & userspace reboot: support CE keys 2020-03-07 01:19:42 +00:00
Loop.cpp Block and wait for /dev/block/loop<N> to appear in case it was created asynchronously. 2019-06-18 15:27:37 -07:00
Loop.h clang-format many files. 2018-09-18 15:41:22 -07:00
main.cpp Acknowledge the 'nofail' fs_mgr flag and skip the expected failure. 2020-05-06 16:45:23 +00:00
MetadataCrypt.cpp vold: use __ANDROID_API_Q__ instead of pre_gki_level 2020-08-10 11:45:08 -07:00
MetadataCrypt.h On newer devices, use dm-default-key to encrypt SD cards 2020-02-18 13:01:00 -08:00
MoveStorage.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
MoveStorage.h clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkHandler.cpp vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
NetlinkHandler.h vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
NetlinkManager.cpp vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
NetlinkManager.h vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
OWNERS Add maco@ to vold OWNERS. 2020-08-11 09:13:58 +02:00
PREUPLOAD.cfg vold should be fully developed in AOSP. 2018-09-11 12:08:43 -06:00
Process.cpp Mount direct boot apps obb dir after fuse is ready. 2020-02-19 16:45:07 +00:00
Process.h Mount direct boot apps obb dir after fuse is ready. 2020-02-19 16:45:07 +00:00
ScryptParameters.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
ScryptParameters.h clang-format many files. 2018-09-18 15:41:22 -07:00
secdiscard.cpp secdiscard: use F2FS_IOC_SEC_TRIM_FILE for secure discard 2020-09-14 08:43:15 +09:00
sehandle.h clang-format many files. 2018-09-18 15:41:22 -07:00
TEST_MAPPING FuseDaemonHostTest is migrated to CTS and renamed. 2020-05-28 18:43:08 +01:00
Utils.cpp Configure backing device max_ratio for FUSE filesystems. 2020-06-30 10:16:55 +02:00
Utils.h Configure backing device max_ratio for FUSE filesystems. 2020-06-30 10:16:55 +02:00
vdc.cpp Merge "vold: remove checkEncryption" am: 2d9777bfbf am: 15c0d3e5d0 2020-07-16 21:00:33 +00:00
vdc.rc Remove all references to FDE enable wipe 2017-12-22 11:17:15 -08:00
vold.rc vold: Grant root group 2018-08-08 17:08:02 -07:00
vold_prepare_subdirs.cpp Enable vold to set level from user. 2020-10-02 14:49:25 +01:00
VoldNativeService.cpp Merge "vold: remove checkEncryption" am: 2d9777bfbf am: 15c0d3e5d0 2020-07-16 21:00:33 +00:00
VoldNativeService.h Merge "vold: remove checkEncryption" am: 2d9777bfbf am: 15c0d3e5d0 2020-07-16 21:00:33 +00:00
VoldNativeServiceValidation.cpp Additional operation check when enabling read logs. 2020-04-03 18:42:04 -07:00
VoldNativeServiceValidation.h [vold] Add argument verification to IncFS methods 2020-03-25 14:33:24 -07:00
VoldUtil.cpp Move over to the C++ Fstab class 2019-01-31 12:34:39 -08:00
VoldUtil.h Remove unused code in VoldUtil.h 2020-02-18 10:48:16 -08:00
VolumeManager.cpp vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
VolumeManager.h vold: remove unused stop() methods 2020-09-23 10:02:25 -07:00
wait_for_keymaster.cpp add wait_for_keymaster 2018-05-09 12:59:18 -07:00
wait_for_keymaster.rc Add rc file for wait_for_keymaster 2018-05-15 16:15:21 -07:00