android_packages_modules_Vi.../microdroid_manager/microdroid_manager.rc

service microdroid_manager /system/bin/microdroid_manager
    disabled
    file /dev/kmsg w
    setenv RUST_LOG info
    # TODO(jooyung) remove this when microdroid_manager becomes a daemon
    oneshot
    # SYS_BOOT is required to exec kexecload from microdroid_manager
    capabilities AUDIT_CONTROL SYS_ADMIN SYS_BOOT
    socket vm_payload_service stream 0666 system system
microdroid_manager: initial impl It is started by init in microdroid and executes a command specified in a VM payload config. Bug: 189301496 Test: MicrodroidHostTestCases (in a microdroid, run /system/bin/microdroid_manager manulally) Change-Id: I85c7e370d4a0dcf58b4aafbe6e9fba73e69c2a44 2021-05-27 15:05:14 +00:00			`service microdroid_manager /system/bin/microdroid_manager`
			`disabled`
microdroid_manager uses kernlog Bug: 189805435 Test: atest MicrodroidTestHostCases adb shell into the VM and execute logcat Change-Id: I2724773c237c4ae208671ee206896679488ba7da 2021-06-25 04:06:25 +00:00			`file /dev/kmsg w`
microdroid_manager prints to kmsg Until we import kernlog, use stdio_to_kmsg as a workaround. Bug: 189805435 Test: Follow microdroid/README.md see the microdroid_manager's log messages Change-Id: I0b178f8fe0751b536253a31c2fc322dc2db51b90 2021-06-16 01:32:02 +00:00			`setenv RUST_LOG info`
microdroid_manager: initial impl It is started by init in microdroid and executes a command specified in a VM payload config. Bug: 189301496 Test: MicrodroidHostTestCases (in a microdroid, run /system/bin/microdroid_manager manulally) Change-Id: I85c7e370d4a0dcf58b4aafbe6e9fba73e69c2a44 2021-05-27 15:05:14 +00:00			`# TODO(jooyung) remove this when microdroid_manager becomes a daemon`
microdroid_manager uses kernlog Bug: 189805435 Test: atest MicrodroidTestHostCases adb shell into the VM and execute logcat Change-Id: I2724773c237c4ae208671ee206896679488ba7da 2021-06-25 04:06:25 +00:00			`oneshot`
Explicitly specify capabilities of root services in microdroid This is a semi-automatic change to simply specify the capabilities that these services have according to the sepolicy. List of capabilities for each service was obtained by running: `sesearch --allow -c capability,capability2 /tmp/microdroid-policy` The policy specifies that all processes have CAP_AUDIT_CONTROL, but it doesn't seem to be actually required, so it's omitted from the service definitions. Also switch tombstone_transmit to run as system user. Test: presubmit Test: atest --test-mapping packages/modules/Virtualization:avf-presubmit Test: run demo app and verify capabilities of microdroid_launcher Test: atest com.android.microdroid.test.MicrodroidTestCase#testTombstonesAreGeneratedUponCrash Bug: 243633980 Bug: 249796710 Change-Id: I19b0cefb07fc7480b3f9dc05cb708a899489fe65 2022-09-30 17:40:05 +00:00			`# SYS_BOOT is required to exec kexecload from microdroid_manager`
			`capabilities AUDIT_CONTROL SYS_ADMIN SYS_BOOT`
[rpc_binder] Use RPC binder over UDS for vm_payload_service Test: atest MicrodroidTests ComposHostTestCases Bug: 222479468 Change-Id: I61f82f6e2c93b7cf2793c1a812cddc0436c33d82 2022-10-24 09:42:40 +00:00			`socket vm_payload_service stream 0666 system system`