/* * Copyright (C) 2019 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ // This is the default linker namespace for a vendor process (a process started // from /vendor/bin/*). #include "linkerconfig/namespacebuilder.h" #include "linkerconfig/common.h" #include "linkerconfig/environment.h" using android::linkerconfig::modules::AsanPath; using android::linkerconfig::modules::GetVendorVndkVersion; using android::linkerconfig::modules::Namespace; namespace { // Keep in sync with the "platform" namespace in art/build/apex/ld.config.txt. const std::vector kVndkLiteVendorRequires = { // Keep in sync with the "platform" namespace in art/build/apex/ld.config.txt. "libdexfile_external.so", "libdexfiled_external.so", "libnativebridge.so", "libnativehelper.so", "libnativeloader.so", "libandroidicu.so", // TODO(b/122876336): Remove libpac.so once it's migrated to Webview "libpac.so", // TODO(b/120786417 or b/134659294): libicuuc.so // and libicui18n.so are kept for app compat. "libicui18n.so", "libicuuc.so", // resolv "libnetd_resolv.so", // nn "libneuralnetworks.so", // statsd "libstatspull.so", "libstatssocket.so", // adbd "libadb_pairing_auth.so", "libadb_pairing_connection.so", "libadb_pairing_server.so", }; } // namespace namespace android { namespace linkerconfig { namespace contents { Namespace BuildVendorDefaultNamespace([[maybe_unused]] const Context& ctx) { bool is_vndklite = ctx.IsVndkliteConfig(); Namespace ns( "default", /*is_isolated=*/!is_vndklite, /*is_visible=*/!is_vndklite); ns.AddSearchPath("/odm/${LIB}", AsanPath::WITH_DATA_ASAN); // Allow loosen restriction between vndk and private platform libraries if (is_vndklite) { ns.AddSearchPath("/odm/${LIB}/vndk", AsanPath::WITH_DATA_ASAN); ns.AddSearchPath("/odm/${LIB}/vndk-sp", AsanPath::WITH_DATA_ASAN); } ns.AddSearchPath("/vendor/${LIB}", AsanPath::WITH_DATA_ASAN); // Allow loosen restriction between vndk and private platform libraries if (is_vndklite) { ns.AddSearchPath("/vendor/${LIB}/vndk", AsanPath::WITH_DATA_ASAN); ns.AddSearchPath("/vendor/${LIB}/vndk-sp", AsanPath::WITH_DATA_ASAN); } // VNDK-Lite devices require broader access from vendor to system/product partition if (is_vndklite) { ns.AddSearchPath("/system/${LIB}", AsanPath::WITH_DATA_ASAN); ns.AddSearchPath(Var("SYSTEM_EXT") + "/${LIB}", AsanPath::WITH_DATA_ASAN); ns.AddSearchPath(Var("PRODUCT") + "/${LIB}", AsanPath::WITH_DATA_ASAN); // Put system vndk at the last search order in vndk_lite for GSI ns.AddSearchPath( "/apex/com.android.vndk.v" + Var("VENDOR_VNDK_VERSION") + "/${LIB}", AsanPath::SAME_PATH); } if (ctx.IsDefaultConfig() && GetVendorVndkVersion() == "27") { ns.AddSearchPath("/vendor/${LIB}/hw", AsanPath::WITH_DATA_ASAN); ns.AddSearchPath("/vendor/${LIB}/egl", AsanPath::WITH_DATA_ASAN); } ns.AddPermittedPath("/odm", AsanPath::WITH_DATA_ASAN); ns.AddPermittedPath("/vendor", AsanPath::WITH_DATA_ASAN); ns.AddPermittedPath("/system/vendor", AsanPath::NONE); if (is_vndklite) { // Because vendor-default NS works like system-default NS for VNDK-lite // devices the requires/provides are added just like system-default. ns.AddRequires(kVndkLiteVendorRequires); ns.AddProvides(GetSystemStubLibraries()); } else { ns.GetLink(ctx.GetSystemNamespaceName()) .AddSharedLib( {Var("LLNDK_LIBRARIES_VENDOR"), Var("SANITIZER_DEFAULT_VENDOR")}); ns.GetLink("vndk").AddSharedLib({Var("VNDK_SAMEPROCESS_LIBRARIES_VENDOR"), Var("VNDK_CORE_LIBRARIES_VENDOR")}); if (android::linkerconfig::modules::IsVndkInSystemNamespace()) { ns.GetLink("vndk_in_system") .AddSharedLib(Var("VNDK_USING_CORE_VARIANT_LIBRARIES")); } } ns.AddRequires(std::vector{"libneuralnetworks.so"}); return ns; } } // namespace contents } // namespace linkerconfig } // namespace android