From 488f76c22857aa8de5ae933373912d149ad8b98b Mon Sep 17 00:00:00 2001 From: mauronofrio matarrese Date: Thu, 11 Apr 2019 21:54:57 +0200 Subject: [PATCH] Adding ld.config.txt support This will fix all that errors that appear when you use a binary when system is mounted --- recovery/root/init.recovery.qcom.rc | 6 + recovery/root/sbin/ld.config.txt | 348 ++++++++++++++++++++++++++++ 2 files changed, 354 insertions(+) create mode 100644 recovery/root/sbin/ld.config.txt diff --git a/recovery/root/init.recovery.qcom.rc b/recovery/root/init.recovery.qcom.rc index 57db6d9..30a8b20 100644 --- a/recovery/root/init.recovery.qcom.rc +++ b/recovery/root/init.recovery.qcom.rc @@ -107,7 +107,13 @@ service time_daemon /sbin/time_daemon disabled seclabel u:r:recovery:s0 +# This helps fix ld.config.txt errors from the linker on Android 8.1+ +service ldconfigtxt /sbin/touch /sbin/ld.config.txt + oneshot + seclabel u:r:recovery:s0 + on boot + export LD_CONFIG_FILE /sbin/ld.config.txt setprop sys.usb.config adb write /proc/touchpanel/gesture_enable 1 write /sys/devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pmi8998@2:qcom,qpnp-smb2/power_supply/usb/otg_switch 1 diff --git a/recovery/root/sbin/ld.config.txt b/recovery/root/sbin/ld.config.txt new file mode 100644 index 0000000..6f9caee --- /dev/null +++ b/recovery/root/sbin/ld.config.txt @@ -0,0 +1,348 @@ +# Copyright (C) 2017 The Android Open Source Project +# +# Bionic loader config file. +# + +# Don't change the order here. The first pattern that matches with the +# absolute path of an executable is selected. +dir.system = /system/bin/ +dir.system = /system/xbin/ +dir.system = /system/product/bin/ + +dir.vendor = /odm/bin/ +dir.vendor = /vendor/bin/ +dir.vendor = /data/nativetest/odm +dir.vendor = /data/nativetest64/odm +dir.vendor = /data/benchmarktest/odm +dir.vendor = /data/benchmarktest64/odm +dir.vendor = /data/nativetest/vendor +dir.vendor = /data/nativetest64/vendor +dir.vendor = /data/benchmarktest/vendor +dir.vendor = /data/benchmarktest64/vendor + +dir.system = /data/nativetest +dir.system = /data/nativetest64 +dir.system = /data/benchmarktest +dir.system = /data/benchmarktest64 + +dir.postinstall = /postinstall + +[system] +additional.namespaces = sphal,vndk,rs + +############################################################################### +# "default" namespace +# +# Framework-side code runs in this namespace. Libs from /vendor partition +# can't be loaded in this namespace. +############################################################################### +namespace.default.isolated = true + +namespace.default.search.paths = /system/${LIB} +namespace.default.search.paths += /system/product/${LIB} + +# We can't have entire /system/${LIB} as permitted paths because doing so +# makes it possible to load libs in /system/${LIB}/vndk* directories by +# their absolute paths (e.g. dlopen("/system/lib/vndk/libbase.so");). +# VNDK libs are built with previous versions of Android and thus must not be +# loaded into this namespace where libs built with the current version of +# Android are loaded. Mixing the two types of libs in the same namespace can +# cause unexpected problem. +namespace.default.permitted.paths = /system/${LIB}/drm +namespace.default.permitted.paths += /system/${LIB}/extractors +namespace.default.permitted.paths += /system/${LIB}/hw +namespace.default.permitted.paths += /system/product/${LIB} +# These are where odex files are located. libart has to be able to dlopen the files +namespace.default.permitted.paths += /system/framework +namespace.default.permitted.paths += /system/app +namespace.default.permitted.paths += /system/priv-app +namespace.default.permitted.paths += /vendor/framework +namespace.default.permitted.paths += /vendor/app +namespace.default.permitted.paths += /vendor/priv-app +namespace.default.permitted.paths += /odm/framework +namespace.default.permitted.paths += /odm/app +namespace.default.permitted.paths += /odm/priv-app +namespace.default.permitted.paths += /oem/app +namespace.default.permitted.paths += /system/product/framework +namespace.default.permitted.paths += /system/product/app +namespace.default.permitted.paths += /system/product/priv-app +namespace.default.permitted.paths += /data +namespace.default.permitted.paths += /mnt/expand + +namespace.default.asan.search.paths = /data/asan/system/${LIB} +namespace.default.asan.search.paths += /system/${LIB} +namespace.default.asan.search.paths += /data/asan/product/${LIB} +namespace.default.asan.search.paths += /product/${LIB} + +namespace.default.asan.permitted.paths = /data +namespace.default.asan.permitted.paths += /system/${LIB}/drm +namespace.default.asan.permitted.paths += /system/${LIB}/extractors +namespace.default.asan.permitted.paths += /system/${LIB}/hw +namespace.default.asan.permitted.paths += /system/framework +namespace.default.asan.permitted.paths += /system/app +namespace.default.asan.permitted.paths += /system/priv-app +namespace.default.asan.permitted.paths += /vendor/framework +namespace.default.asan.permitted.paths += /vendor/app +namespace.default.asan.permitted.paths += /vendor/priv-app +namespace.default.asan.permitted.paths += /odm/framework +namespace.default.asan.permitted.paths += /odm/app +namespace.default.asan.permitted.paths += /odm/priv-app +namespace.default.asan.permitted.paths += /oem/app +namespace.default.asan.permitted.paths += /system/product/${LIB} +namespace.default.asan.permitted.paths += /system/product/framework +namespace.default.asan.permitted.paths += /system/product/app +namespace.default.asan.permitted.paths += /system/product/priv-app +namespace.default.asan.permitted.paths += /mnt/expand + +############################################################################### +# "sphal" namespace +# +# SP-HAL(Sameprocess-HAL)s are the only vendor libraries that are allowed to be +# loaded inside system processes. libEGL_.so, libGLESv2_.so, +# android.hardware.graphics.mapper@2.0-impl.so, etc are SP-HALs. +# +# This namespace is exclusivly for SP-HALs. When the framework tries to dynami- +# cally load SP-HALs, android_dlopen_ext() is used to explicitly specifying +# that they should be searched and loaded from this namespace. +# +# Note that there is no link from the default namespace to this namespace. +############################################################################### +namespace.sphal.isolated = true +namespace.sphal.visible = true + +namespace.sphal.search.paths = /odm/${LIB} +namespace.sphal.search.paths += /vendor/${LIB} + +namespace.sphal.permitted.paths = /odm/${LIB} +namespace.sphal.permitted.paths += /vendor/${LIB} + +namespace.sphal.asan.search.paths = /data/asan/odm/${LIB} +namespace.sphal.asan.search.paths += /odm/${LIB} +namespace.sphal.asan.search.paths += /data/asan/vendor/${LIB} +namespace.sphal.asan.search.paths += /vendor/${LIB} + +namespace.sphal.asan.permitted.paths = /data/asan/odm/${LIB} +namespace.sphal.asan.permitted.paths += /odm/${LIB} +namespace.sphal.asan.permitted.paths += /data/asan/vendor/${LIB} +namespace.sphal.asan.permitted.paths += /vendor/${LIB} + +# Once in this namespace, access to libraries in /system/lib is restricted. Only +# libs listed here can be used. +namespace.sphal.links = default,vndk,rs + +namespace.sphal.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so +namespace.sphal.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so + +namespace.sphal.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so + +# Renderscript gets separate namespace +namespace.sphal.link.rs.shared_libs = libRS_internal.so + +############################################################################### +# "rs" namespace +# +# This namespace is exclusively for Renderscript internal libraries. +# This namespace has slightly looser restriction than the vndk namespace because +# of the genuine characteristics of Renderscript; /data is in the permitted path +# to load the compiled *.so file and libmediandk.so can be used here. +############################################################################### +namespace.rs.isolated = true +namespace.rs.visible = true + +namespace.rs.search.paths = /odm/${LIB}/vndk-sp +namespace.rs.search.paths += /vendor/${LIB}/vndk-sp +namespace.rs.search.paths += /system/${LIB}/vndk-sp-28 +namespace.rs.search.paths += /odm/${LIB} +namespace.rs.search.paths += /vendor/${LIB} + +namespace.rs.permitted.paths = /odm/${LIB} +namespace.rs.permitted.paths += /vendor/${LIB} +namespace.rs.permitted.paths += /data + +namespace.rs.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp +namespace.rs.asan.search.paths += /odm/${LIB}/vndk-sp +namespace.rs.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp +namespace.rs.asan.search.paths += /vendor/${LIB}/vndk-sp +namespace.rs.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28 +namespace.rs.asan.search.paths += /system/${LIB}/vndk-sp-28 +namespace.rs.asan.search.paths += /data/asan/odm/${LIB} +namespace.rs.asan.search.paths += /odm/${LIB} +namespace.rs.asan.search.paths += /data/asan/vendor/${LIB} +namespace.rs.asan.search.paths += /vendor/${LIB} + +namespace.rs.asan.permitted.paths = /data/asan/odm/${LIB} +namespace.rs.asan.permitted.paths += /odm/${LIB} +namespace.rs.asan.permitted.paths += /data/asan/vendor/${LIB} +namespace.rs.asan.permitted.paths += /vendor/${LIB} +namespace.rs.asan.permitted.paths += /data + +namespace.rs.links = default,vndk + +namespace.rs.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so +namespace.rs.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so +# Private LLNDK libs (e.g. libft2.so) are exceptionally allowed to this +# namespace because RS framework libs are using them. +namespace.rs.link.default.shared_libs += libft2.so + +namespace.rs.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so + +############################################################################### +# "vndk" namespace +# +# This namespace is exclusively for vndk-sp libs. +############################################################################### +namespace.vndk.isolated = true +namespace.vndk.visible = true + +namespace.vndk.search.paths = /odm/${LIB}/vndk-sp +namespace.vndk.search.paths += /vendor/${LIB}/vndk-sp +namespace.vndk.search.paths += /system/${LIB}/vndk-sp-28 + +namespace.vndk.permitted.paths = /odm/${LIB}/hw +namespace.vndk.permitted.paths += /odm/${LIB}/egl +namespace.vndk.permitted.paths += /vendor/${LIB}/hw +namespace.vndk.permitted.paths += /vendor/${LIB}/egl +# This is exceptionally required since android.hidl.memory@1.0-impl.so is here +namespace.vndk.permitted.paths += /system/${LIB}/vndk-sp-28/hw + +namespace.vndk.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /odm/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28 +namespace.vndk.asan.search.paths += /system/${LIB}/vndk-sp-28 + +namespace.vndk.asan.permitted.paths = /data/asan/odm/${LIB}/hw +namespace.vndk.asan.permitted.paths += /odm/${LIB}/hw +namespace.vndk.asan.permitted.paths += /data/asan/odm/${LIB}/egl +namespace.vndk.asan.permitted.paths += /odm/${LIB}/egl +namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/hw +namespace.vndk.asan.permitted.paths += /vendor/${LIB}/hw +namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/egl +namespace.vndk.asan.permitted.paths += /vendor/${LIB}/egl + +namespace.vndk.asan.permitted.paths += /data/asan/system/${LIB}/vndk-sp-28/hw +namespace.vndk.asan.permitted.paths += /system/${LIB}/vndk-sp-28/hw + +# The "vndk" namespace links to "default" namespace for LLNDK libs and links to +# "sphal" namespace for vendor libs. The ordering matters. The "default" +# namespace has higher priority than the "sphal" namespace. +namespace.vndk.links = default,sphal + +# When these NDK libs are required inside this namespace, then it is redirected +# to the default namespace. This is possible since their ABI is stable across +# Android releases. +namespace.vndk.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so +namespace.vndk.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so + +# Allow VNDK-SP extensions to use vendor libraries +namespace.vndk.link.sphal.allow_all_shared_libs = true + +############################################################################### +# Namespace config for vendor processes. In O, no restriction is enforced for +# them. However, in O-MR1, access to /system/${LIB} will not be allowed to +# the default namespace. 'system' namespace will be added to give limited +# (LL-NDK only) access. +############################################################################### +[vendor] +additional.namespaces = system,vndk + +############################################################################### +# "default" namespace +# +# This is the default linker namespace for a vendor process (a process started +# from /vendor/bin/*). The main executable and the libs under /vendor/lib[64] +# are loaded directly into this namespace. However, other libs under the system +# partition (VNDK and LLNDK libraries) are not loaded here but from the +# separate namespace 'system'. The delegation to the system namespace is done +# via the 'namespace.default.link.system.shared_libs' property below. +############################################################################### +namespace.default.isolated = true +namespace.default.visible = true + +namespace.default.search.paths = /odm/${LIB} +namespace.default.search.paths += /vendor/${LIB} + +namespace.default.permitted.paths = /odm +namespace.default.permitted.paths += /vendor + +namespace.default.asan.search.paths = /data/asan/odm/${LIB} +namespace.default.asan.search.paths += /odm/${LIB} +namespace.default.asan.search.paths += /data/asan/vendor/${LIB} +namespace.default.asan.search.paths += /vendor/${LIB} + +namespace.default.asan.permitted.paths = /data/asan/odm +namespace.default.asan.permitted.paths += /odm +namespace.default.asan.permitted.paths += /data/asan/vendor +namespace.default.asan.permitted.paths += /vendor + +namespace.default.links = system,vndk +namespace.default.link.system.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so +namespace.default.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so +namespace.default.link.vndk.shared_libs += android.frameworks.displayservice@1.0.so:android.frameworks.schedulerservice@1.0.so:android.frameworks.sensorservice@1.0.so:android.frameworks.vr.composer@1.0.so:android.hardware.audio.common-util.so:android.hardware.audio.common@2.0.so:android.hardware.audio.common@2.0-util.so:android.hardware.audio.common@4.0.so:android.hardware.audio.common@4.0-util.so:android.hardware.audio.effect@2.0.so:android.hardware.audio.effect@4.0.so:android.hardware.audio@2.0.so:android.hardware.audio@4.0.so:android.hardware.authsecret@1.0.so:android.hardware.automotive.audiocontrol@1.0.so:android.hardware.automotive.evs@1.0.so:android.hardware.automotive.vehicle@2.0.so:android.hardware.biometrics.fingerprint@2.1.so:android.hardware.bluetooth.a2dp@1.0.so:android.hardware.bluetooth@1.0.so:android.hardware.boot@1.0.so:android.hardware.broadcastradio@1.0.so:android.hardware.broadcastradio@1.1.so:android.hardware.broadcastradio@2.0.so:android.hardware.camera.common@1.0.so:android.hardware.camera.device@1.0.so:android.hardware.camera.device@3.2.so:android.hardware.camera.device@3.3.so:android.hardware.camera.device@3.4.so:android.hardware.camera.metadata@3.2.so:android.hardware.camera.metadata@3.3.so:android.hardware.camera.provider@2.4.so:android.hardware.cas.native@1.0.so:android.hardware.cas@1.0.so:android.hardware.configstore-utils.so:android.hardware.configstore@1.0.so:android.hardware.configstore@1.1.so:android.hardware.confirmationui-support-lib.so:android.hardware.confirmationui@1.0.so:android.hardware.contexthub@1.0.so:android.hardware.drm@1.0.so:android.hardware.drm@1.1.so:android.hardware.dumpstate@1.0.so:android.hardware.gatekeeper@1.0.so:android.hardware.gnss@1.0.so:android.hardware.gnss@1.1.so:android.hardware.graphics.allocator@2.0.so:android.hardware.graphics.bufferqueue@1.0.so:android.hardware.graphics.composer@2.1.so:android.hardware.graphics.composer@2.2.so:android.hardware.health@1.0.so:android.hardware.health@2.0.so:android.hardware.ir@1.0.so:android.hardware.keymaster@3.0.so:android.hardware.keymaster@4.0.so:android.hardware.light@2.0.so:android.hardware.media.bufferpool@1.0.so:android.hardware.media.omx@1.0.so:android.hardware.media@1.0.so:android.hardware.memtrack@1.0.so:android.hardware.neuralnetworks@1.0.so:android.hardware.neuralnetworks@1.1.so:android.hardware.nfc@1.0.so:android.hardware.nfc@1.1.so:android.hardware.oemlock@1.0.so:android.hardware.power@1.0.so:android.hardware.power@1.1.so:android.hardware.power@1.2.so:android.hardware.radio.config@1.0.so:android.hardware.radio.deprecated@1.0.so:android.hardware.radio@1.0.so:android.hardware.radio@1.1.so:android.hardware.radio@1.2.so:android.hardware.secure_element@1.0.so:android.hardware.sensors@1.0.so:android.hardware.soundtrigger@2.0.so:android.hardware.soundtrigger@2.0-core.so:android.hardware.soundtrigger@2.1.so:android.hardware.tetheroffload.config@1.0.so:android.hardware.tetheroffload.control@1.0.so:android.hardware.thermal@1.0.so:android.hardware.thermal@1.1.so:android.hardware.tv.cec@1.0.so:android.hardware.tv.input@1.0.so:android.hardware.usb.gadget@1.0.so:android.hardware.usb@1.0.so:android.hardware.usb@1.1.so:android.hardware.vibrator@1.0.so:android.hardware.vibrator@1.1.so:android.hardware.vibrator@1.2.so:android.hardware.vr@1.0.so:android.hardware.weaver@1.0.so:android.hardware.wifi.hostapd@1.0.so:android.hardware.wifi.offload@1.0.so:android.hardware.wifi.supplicant@1.0.so:android.hardware.wifi.supplicant@1.1.so:android.hardware.wifi@1.0.so:android.hardware.wifi@1.1.so:android.hardware.wifi@1.2.so:android.hidl.allocator@1.0.so:android.hidl.memory.block@1.0.so:android.hidl.token@1.0.so:android.hidl.token@1.0-utils.so:android.system.net.netd@1.0.so:android.system.net.netd@1.1.so:android.system.wifi.keystore@1.0.so:libadf.so:libaudioroute.so:libaudioutils.so:libbinder.so:libcamera_metadata.so:libcap.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.ubsan_standalone-arm-android.so:libcn-cbor.so:libcrypto.so:libcrypto_utils.so:libcurl.so:libdiskconfig.so:libdumpstateutil.so:libevent.so:libexif.so:libexpat.so:libfmq.so:libgatekeeper.so:libhardware_legacy.so:libhidlallocatorutils.so:libhidlcache.so:libjpeg.so:libkeymaster_messages.so:libkeymaster_portable.so:libldacBT_abr.so:libldacBT_enc.so:liblz4.so:libmedia_helper.so:libmedia_omx.so:libmemtrack.so:libminijail.so:libmkbootimg_abi_check.so:libnetutils.so:libnl.so:libopus.so:libpagemap.so:libpcre2.so:libpiex.so:libpng.so:libpower.so:libprocinfo.so:libprotobuf-cpp-full.so:libprotobuf-cpp-lite.so:libpuresoftkeymasterdevice.so:libradio_metadata.so:libselinux.so:libsoftkeymasterdevice.so:libspeexresampler.so:libsqlite.so:libssl.so:libstagefright_amrnb_common.so:libstagefright_bufferqueue_helper.so:libstagefright_enc_common.so:libstagefright_flacdec.so:libstagefright_foundation.so:libstagefright_omx.so:libstagefright_omx_utils.so:libstagefright_soft_aacdec.so:libstagefright_soft_aacenc.so:libstagefright_soft_amrdec.so:libstagefright_soft_amrnbenc.so:libstagefright_soft_amrwbenc.so:libstagefright_soft_avcdec.so:libstagefright_soft_avcenc.so:libstagefright_soft_flacdec.so:libstagefright_soft_flacenc.so:libstagefright_soft_g711dec.so:libstagefright_soft_gsmdec.so:libstagefright_soft_hevcdec.so:libstagefright_soft_mp3dec.so:libstagefright_soft_mpeg2dec.so:libstagefright_soft_mpeg4dec.so:libstagefright_soft_mpeg4enc.so:libstagefright_soft_opusdec.so:libstagefright_soft_rawdec.so:libstagefright_soft_vorbisdec.so:libstagefright_soft_vpxdec.so:libstagefright_soft_vpxenc.so:libstagefright_xmlparser.so:libsuspend.so:libsysutils.so:libtinyalsa.so:libtinyxml2.so:libui.so:libusbhost.so:libvixl-arm.so:libvixl-arm64.so:libvorbisidec.so:libwifi-system-iface.so:libxml2.so:libyuv.so:libziparchive.so + +############################################################################### +# "vndk" namespace +# +# This namespace is where VNDK and VNDK-SP libraries are loaded for +# a vendor process. +############################################################################### +namespace.vndk.isolated = false + +namespace.vndk.search.paths = /odm/${LIB}/vndk +namespace.vndk.search.paths += /odm/${LIB}/vndk-sp +namespace.vndk.search.paths += /vendor/${LIB}/vndk +namespace.vndk.search.paths += /vendor/${LIB}/vndk-sp +namespace.vndk.search.paths += /system/${LIB}/vndk-sp-28 +namespace.vndk.search.paths += /system/${LIB}/vndk-28 + +namespace.vndk.asan.search.paths = /data/asan/odm/${LIB}/vndk +namespace.vndk.asan.search.paths += /odm/${LIB}/vndk +namespace.vndk.asan.search.paths += /data/asan/odm/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /odm/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk +namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk +namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk-sp +namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28 +namespace.vndk.asan.search.paths += /system/${LIB}/vndk-sp-28 +namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-28 +namespace.vndk.asan.search.paths += /system/${LIB}/vndk-28 + +# When these NDK libs are required inside this namespace, then it is redirected +# to the system namespace. This is possible since their ABI is stable across +# Android releases. +namespace.vndk.links = system,default +namespace.vndk.link.system.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so +namespace.vndk.link.system.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so + +namespace.vndk.link.default.allow_all_shared_libs = true + +############################################################################### +# "system" namespace +# +# This namespace is where system libs (VNDK and LLNDK libs) are loaded for +# a vendor process. +############################################################################### +namespace.system.isolated = false + +namespace.system.search.paths = /system/${LIB} +namespace.system.search.paths += /system/product/${LIB} + +namespace.system.asan.search.paths = /data/asan/system/${LIB} +namespace.system.asan.search.paths += /system/${LIB} +namespace.system.asan.search.paths += /data/asan/product/${LIB} +namespace.system.asan.search.paths += /product/${LIB} + +############################################################################### +# Namespace config for binaries under /postinstall. +# Only one default namespace is defined and it has no directories other than +# /system/lib in the search paths. This is because linker calls realpath on the +# search paths and this causes selinux denial if the paths (/vendor, /odm) are +# not allowed to the poinstall binaries. There is no reason to allow the +# binaries to access the paths. +############################################################################### +[postinstall] +namespace.default.isolated = false +namespace.default.search.paths = /system/${LIB} +namespace.default.search.paths += /system/product/${LIB} -- 2.20.1