Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 1 | # Copyright (C) 2017 The Android Open Source Project |
| 2 | # |
| 3 | # Bionic loader config file. |
| 4 | # This gives the exactly the same namespace setup in pre-O. |
| 5 | # |
| 6 | |
| 7 | # All binaries gets the same configuration 'legacy' |
| 8 | dir.legacy = /system |
| 9 | dir.legacy = /vendor |
Alin Jerpelea | fa7958e | 2017-09-27 09:40:59 +0200 | [diff] [blame] | 10 | dir.legacy = /odm |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 11 | dir.legacy = /sbin |
| 12 | |
Jiyong Park | 955029a | 2018-03-20 01:12:31 +0900 | [diff] [blame] | 13 | # Except for /postinstall, where only /system is searched |
| 14 | dir.postinstall = /postinstall |
| 15 | |
Jiyong Park | 450cff4 | 2017-04-05 14:24:14 +0900 | [diff] [blame] | 16 | [legacy] |
| 17 | namespace.default.isolated = false |
Jiyong Park | 2498e1b | 2017-12-12 22:11:47 +0900 | [diff] [blame] | 18 | |
| 19 | namespace.default.search.paths = /system/${LIB} |
| 20 | namespace.default.search.paths += /vendor/${LIB} |
| 21 | namespace.default.search.paths += /odm/${LIB} |
| 22 | |
| 23 | namespace.default.asan.search.paths = /data/asan/system/${LIB} |
| 24 | namespace.default.asan.search.paths += /system/${LIB} |
| 25 | namespace.default.asan.search.paths += /data/asan/odm/${LIB} |
| 26 | namespace.default.asan.search.paths += /odm/${LIB} |
| 27 | namespace.default.asan.search.paths += /data/asan/vendor/${LIB} |
| 28 | namespace.default.asan.search.paths += /vendor/${LIB} |
Jiyong Park | 955029a | 2018-03-20 01:12:31 +0900 | [diff] [blame] | 29 | |
| 30 | ############################################################################### |
| 31 | # Namespace config for binaries under /postinstall. |
| 32 | # Only one default namespace is defined and it has no directories other than |
| 33 | # /system/lib in the search paths. This is because linker calls realpath on the |
| 34 | # search paths and this causes selinux denial if the paths (/vendor, /odm) are |
| 35 | # not allowed to the poinstall binaries. There is no reason to allow the |
| 36 | # binaries to access the paths. |
| 37 | ############################################################################### |
| 38 | [postinstall] |
| 39 | namespace.default.isolated = false |
| 40 | namespace.default.search.paths = /system/${LIB} |