451cc96801
microdroid_manager creates a vsock connection with the host and redirects the payload's stdin/stdout/stderr streams over it. This may not necessarily be a securiy issue if the app never writes any secrets to its standard output, but it would be safer to not open up a communication channel like that by default. If the payload wishes to pass its logs to the host, it should open up the connection explicitly. Remove the vsock connection, the virtualizationservice server and the corresponding file descriptor argument of onPayloadStarted() callback. Instead, provide onPayloadStdio() that the payload can optinally call to set up the connection. Bug: 245727626 Bug: 253221932 Test: atest -p packages/modules/Virtualization:avf-presubmit Change-Id: I89fd3a52aae9272db7300224b88d87c6f4d8a8a7 |
||
|---|---|---|
| .. | ||
| android/system | ||
| Android.bp | ||