Implement sandboxing for Android Cuttlefish VM's
- Dominant language
- Python
- Stars
- 5.6k
- Forks
- 629
- Avg merge
- 4d 6h
- Merged PRs (30d)
- 22
Description
When launching virtual cuttlefish machines, we use the following [code](https://github.com/marktefftech/clusterfuzz/blob/3fdc86d4e13db47b2583468c6d2a28107817bf01/src/clusterfuzz/_internal/platforms/android/adb.py#L422-L424), which specifically disables sandboxing behavior for the Cuttlefish device:
```
launch_cvd_command_line = (
f'sudo {launch_cvd_path} --daemon --memory_mb={device_memory_mb} '
'--report_anonymous_usage_stats=Y --enable_sandbox=true --resume=false')
```
We try to keep sandboxing enabled when possible since it enhances security.
The goal of this issue is to track the disablement, which is required to successfully launch the virtual devices.
Contributor guide
Assessment
This issue has not been assessed yet.