google / google/clusterfuzz

Implement sandboxing for Android Cuttlefish VM's

Open
#3,777 0 comments 0 reactions 1 assignee Claimed by @marktefftech View on GitHub
minor enhancement
Dominant language
Python
Stars
5.6k
Forks
629
Avg merge
4d 6h
Merged PRs (30d)
22

Description

When launching virtual cuttlefish machines, we use the following [code](https://github.com/marktefftech/clusterfuzz/blob/3fdc86d4e13db47b2583468c6d2a28107817bf01/src/clusterfuzz/_internal/platforms/android/adb.py#L422-L424), which specifically disables sandboxing behavior for the Cuttlefish device:

```
launch_cvd_command_line = (
f'sudo {launch_cvd_path} --daemon --memory_mb={device_memory_mb} '
'--report_anonymous_usage_stats=Y --enable_sandbox=true --resume=false')
```

We try to keep sandboxing enabled when possible since it enhances security.

The goal of this issue is to track the disablement, which is required to successfully launch the virtual devices.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.