Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 1 | # Copyright (C) 2017 The Android Open Source Project |
| 2 | # |
| 3 | # Bionic loader config file. |
| 4 | # |
| 5 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 6 | # Don't change the order here. |
| 7 | dir.system = /system/bin/ |
| 8 | dir.system = /system/xbin/ |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 9 | dir.vendor = /odm/bin/ |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 10 | dir.vendor = /vendor/bin/ |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 11 | dir.vendor = /data/nativetest/odm |
| 12 | dir.vendor = /data/nativetest64/odm |
| 13 | dir.vendor = /data/benchmarktest/odm |
| 14 | dir.vendor = /data/benchmarktest64/odm |
Jiyong Park | a2935e0 | 2017-09-29 05:04:00 +0900 | [diff] [blame] | 15 | dir.vendor = /data/nativetest/vendor |
| 16 | dir.vendor = /data/nativetest64/vendor |
| 17 | dir.vendor = /data/benchmarktest/vendor |
| 18 | dir.vendor = /data/benchmarktest64/vendor |
| 19 | dir.system = /data/nativetest |
| 20 | dir.system = /data/nativetest64 |
| 21 | dir.system = /data/benchmarktest |
| 22 | dir.system = /data/benchmarktest64 |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 23 | |
| 24 | [system] |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 25 | additional.namespaces = sphal,vndk,rs |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 26 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 27 | ############################################################################### |
| 28 | # "default" namespace |
| 29 | # |
| 30 | # Framework-side code runs in this namespace. Anything from /vendor partition |
| 31 | # can't be loaded in this namespace. |
| 32 | ############################################################################### |
| 33 | namespace.default.isolated = false |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 34 | namespace.default.search.paths = /system/${LIB}:/odm/${LIB}:/vendor/${LIB} |
| 35 | namespace.default.permitted.paths = /system/${LIB}:/odm/${LIB}:/vendor/${LIB} |
Dimitry Ivanov | ee34aec | 2017-02-15 14:11:18 -0800 | [diff] [blame] | 36 | |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 37 | namespace.default.asan.search.paths = /data/asan/system/${LIB}:/system/${LIB}:/data/asan/vendor/${LIB}:/vendor/${LIB} |
| 38 | namespace.default.asan.permitted.paths = /data/asan/system/${LIB}:/system/${LIB}:/data/asan/vendor/${LIB}:/vendor/${LIB} |
| 39 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 40 | # TODO(b/37013858): remove all dependencies to /vendor/lib from system processes |
| 41 | # When this is done, comment out following three lines and remove the three |
| 42 | # lines above |
| 43 | #namespace.default.isolated = true |
| 44 | #namespace.default.search.paths = /system/${LIB} |
| 45 | #namespace.default.permitted.paths = /system/${LIB} |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 46 | # |
| 47 | #namespace.default.asan.search.paths = /data/asan/system/${LIB}:/system/${LIB} |
| 48 | #namespace.default.asan.permitted.paths = /data/asan/system/${LIB}:/system/${LIB} |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 49 | |
| 50 | ############################################################################### |
| 51 | # "sphal" namespace |
| 52 | # |
| 53 | # SP-HAL(Sameprocess-HAL)s are the only vendor libraries that are allowed to be |
| 54 | # loaded inside system processes. libEGL_<chipset>.so, libGLESv2_<chipset>.so, |
| 55 | # android.hardware.graphics.mapper@2.0-impl.so, etc are SP-HALs. |
| 56 | # |
| 57 | # This namespace is exclusivly for SP-HALs. When the framework tries to dynami- |
| 58 | # cally load SP-HALs, android_dlopen_ext() is used to explicitly specifying |
| 59 | # that they should be searched and loaded from this namespace. |
| 60 | # |
| 61 | # Note that there is no link from the default namespace to this namespace. |
| 62 | ############################################################################### |
| 63 | namespace.sphal.isolated = true |
| 64 | namespace.sphal.visible = true |
| 65 | namespace.sphal.search.paths = /vendor/${LIB}/egl:/vendor/${LIB}/hw:/vendor/${LIB} |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 66 | namespace.sphal.permitted.paths = /vendor/${LIB}:/system/${LIB}/vndk-sp${VNDK_VER}/hw |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 67 | |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 68 | namespace.sphal.asan.search.paths = /data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl:/data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}:/vendor/${LIB} |
| 69 | namespace.sphal.asan.permitted.paths = /data/asan/vendor/${LIB}:/vendor/${LIB} |
| 70 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 71 | # Once in this namespace, access to libraries in /system/lib is restricted. Only |
| 72 | # libs listed here can be used. |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 73 | namespace.sphal.links = default,vndk,rs |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 74 | |
| 75 | # WARNING: only NDK libs can be listed here. |
Jiyong Park | e58fa1b | 2017-08-31 22:11:35 +0900 | [diff] [blame] | 76 | namespace.sphal.link.default.shared_libs = libc.so:libm.so:libdl.so:libstdc++.so:liblog.so:libnativewindow.so:libEGL.so:libsync.so:libGLESv1_CM.so:libGLESv2.so:libvndksupport.so:libz.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 77 | |
| 78 | # WARNING: only VNDK-SP libs can be listed here. DO NOT EDIT this line. |
Logan Chien | 97772e4 | 2017-12-12 15:57:53 +0800 | [diff] [blame^] | 79 | namespace.sphal.link.vndk.shared_libs = android.hardware.renderscript@1.0.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.common@1.0.so:android.hidl.memory@1.0.so:libhwbinder.so:libbase.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libion.so:libutils.so:libc++.so |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 80 | |
| 81 | # Renderscript gets separate namespace |
| 82 | namespace.sphal.link.rs.shared_libs = libRS_internal.so |
| 83 | |
| 84 | ############################################################################### |
| 85 | # "rs" namespace |
| 86 | # |
| 87 | # This namespace is exclusively for Renderscript internal libraries. |
| 88 | # This namespace has slightly looser restriction than the vndk namespace because |
| 89 | # of the genuine characteristics of Renderscript; /data is in the permitted path |
| 90 | # to load the compiled *.so file and libmediandk.so can be used here. |
| 91 | ############################################################################### |
| 92 | namespace.rs.isolated = true |
Jiyong Park | 7075bca | 2017-08-16 23:32:54 +0900 | [diff] [blame] | 93 | namespace.rs.visible = true |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 94 | namespace.rs.search.paths = /vendor/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER}:/vendor/${LIB} |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 95 | namespace.rs.permitted.paths = /vendor/${LIB}:/data |
| 96 | |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 97 | namespace.rs.asan.search.paths = /data/asan/vendor/${LIB}/vndk-sp${VNDK_VER}:/vendor/${LIB}/vndk-sp${VNDK_VER}:/data/asan/system/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER}:/data/asan/vendor/${LIB}:/vendor/${LIB} |
Jiyong Park | eb9694a | 2017-05-09 15:07:43 +0900 | [diff] [blame] | 98 | namespace.rs.asan.permitted.paths = /data/asan/vendor/${LIB}:/vendor/${LIB}:/data |
| 99 | |
Jiyong Park | bfa03ee | 2017-04-21 15:16:12 +0900 | [diff] [blame] | 100 | namespace.rs.links = default,vndk |
Jiyong Park | e58fa1b | 2017-08-31 22:11:35 +0900 | [diff] [blame] | 101 | namespace.rs.link.default.shared_libs = libc.so:libm.so:libdl.so:libstdc++.so:liblog.so:libnativewindow.so:libEGL.so:libsync.so:libGLESv1_CM.so:libGLESv2.so:libmediandk.so:libvndksupport.so:libz.so:libft2.so |
Logan Chien | 97772e4 | 2017-12-12 15:57:53 +0800 | [diff] [blame^] | 102 | namespace.rs.link.vndk.shared_libs = android.hardware.renderscript@1.0.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.common@1.0.so:android.hidl.memory@1.0.so:libhwbinder.so:libbase.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libion.so:libutils.so:libc++.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 103 | |
| 104 | ############################################################################### |
| 105 | # "vndk" namespace |
| 106 | # |
| 107 | # This namespace is exclusively for vndk-sp libs. |
| 108 | ############################################################################### |
| 109 | namespace.vndk.isolated = true |
Jiyong Park | 6ed1a1c | 2017-09-26 01:38:22 +0900 | [diff] [blame] | 110 | namespace.vndk.visible = true |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 111 | namespace.vndk.search.paths = /vendor/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER} |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 112 | namespace.vndk.permitted.paths = /vendor/${LIB}/hw:/vendor/${LIB}/egl |
| 113 | |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 114 | namespace.vndk.asan.search.paths = /data/asan/vendor/${LIB}/vndk-sp${VNDK_VER}:/vendor/${LIB}/vndk-sp${VNDK_VER}:/data/asan/system/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER} |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 115 | namespace.vndk.asan.permitted.paths = /data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl |
| 116 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 117 | # When these NDK libs are required inside this namespace, then it is redirected |
| 118 | # to the default namespace. This is possible since their ABI is stable across |
| 119 | # Android releases. |
| 120 | namespace.vndk.links = default |
Jiyong Park | e58fa1b | 2017-08-31 22:11:35 +0900 | [diff] [blame] | 121 | namespace.vndk.link.default.shared_libs = android.hidl.memory@1.0-impl.so:libc.so:libm.so:libdl.so:libstdc++.so:liblog.so:libnativewindow.so:libEGL.so:libsync.so:libvndksupport.so:libz.so |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 122 | |
Jiyong Park | c034a43 | 2017-07-20 15:17:35 +0900 | [diff] [blame] | 123 | ############################################################################### |
| 124 | # Namespace config for vendor processes. In O, no restriction is enforced for |
| 125 | # them. However, in O-MR1, access to /system/${LIB} will not be allowed to |
| 126 | # the default namespace. 'system' namespace will be added to give limited |
| 127 | # (LL-NDK only) access. |
| 128 | ############################################################################### |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 129 | [vendor] |
| 130 | namespace.default.isolated = false |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 131 | namespace.default.search.paths = /odm/${LIB}/hw:/odm/${LIB}/egl:/odm/${LIB}:/vendor/${LIB}/hw:/vendor/${LIB}/egl:/vendor/${LIB}:/system/${LIB}/vndk${VNDK_VER}:/odm/${LIB}/vndk-sp${VNDK_VER}:/vendor/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB} |
Andreas Gampe | c7c2d7b | 2017-04-21 17:18:45 -0700 | [diff] [blame] | 132 | |
Justin Yun | 44bb46f | 2017-12-07 13:27:32 +0900 | [diff] [blame] | 133 | namespace.default.asan.search.paths = /data/asan/odm/${LIB}/hw:/odm/${LIB}/hw:/data/asan/odm/${LIB}/egl:/odm/${LIB}/egl:/data/asan/odm/${LIB}:/odm/${LIB}:/data/asan/vendor/${LIB}/hw:/vendor/${LIB}/hw:/data/asan/vendor/${LIB}/egl:/vendor/${LIB}/egl:/data/asan/vendor/${LIB}:/vendor/${LIB}:/data/asan/system/${LIB}/vndk${VNDK_VER}:/system/${LIB}/vndk${VNDK_VER}:/data/asan/odm/${LIB}/vndk-sp${VNDK_VER}:/odm/${LIB}/vndk-sp${VNDK_VER}:/data/asan/vendor/${LIB}/vndk-sp${VNDK_VER}:/vendor/${LIB}/vndk-sp${VNDK_VER}:/data/asan/system/${LIB}/vndk-sp${VNDK_VER}:/system/${LIB}/vndk-sp${VNDK_VER}:/data/asan/system/${LIB}:/system/${LIB} |