commit | 1d3b727baffaa1ee2b3a4297533e003bc76ffc59 | [log] [tgz] |
---|---|---|
author | Zentaro Kavanagh <zentaro@chromium.org> | Thu Apr 26 07:12:55 2018 -0700 |
committer | chrome-bot <chrome-bot@chromium.org> | Fri May 04 00:13:51 2018 -0700 |
tree | 4cd879277e1080938d7dfcfa9e31dd027aa6c481 | |
parent | 14d68da02a2966f57b46c9da8b4ec8c1a3a57fc0 [diff] |
installer: Prevent kernel key rollforward during recovery. - Sets the kernel_max_rollforward value to 0 to prevent the kernel key versions from rolling forward before the device has a chance to see policy. - The update_engine will set the value based on rollback policy and the key version numbers of the earliest image we allow rollback to. By default 4 in the past. - Consumer devices and devices with rollback disabled will have this value set to logical infinity, which always rolls forward the min versions. This was the existing behavior. BUG=chromium:814090 TEST=none Change-Id: I74319eb5b6a4fb74fcfa3006b0a36b36959d4d73 Reviewed-on: https://chromium-review.googlesource.com/1030260 Commit-Ready: Marton Hunyady <hunyadym@chromium.org> Tested-by: Zentaro Kavanagh <zentaro@chromium.org> Reviewed-by: Randall Spangler <rspangler@chromium.org> Reviewed-by: Marton Hunyady <hunyadym@chromium.org>
This repo holds (most) of the custom code that makes up the Chromium OS platform. That largely covers daemons, programs, and libraries that were written specifically for Chromium OS.
We moved from multiple separate repos in platform/ to a single repo in platform2/ for a number of reasons:
While most projects were merged, not all of them were. Some projects were standalone already (such as vboot), or never got around to being folded in (such as imageloader). Some day those extra projects might get merged in.
Similarly, some projects that were merged in, were then merged back out. This was due to the evolution of the Brillo project and collaboration with Android. That means the AOSP repos are the upstream and Chromium OS carries copies.
Project | Description |
---|---|
arc | Tools/deamons/init-scripts to run ARC |
attestation | Daemon and client for managing remote attestation |
authpolicy | Daemon for integrating with Microsoft Active Directory (AD) domains |
avtest_label_detect | Test tool for OCRing device labels |
biod | Biometrics daemon |
bluetooth | Bluetooth Service and tools |
bootstat | Tools for tracking points in the overall boot process (for metrics) |
buffet | Daemon for reacting to cloud messages |
chaps | PKCS #11 implementation for TPM 1 devices |
chromeos-common-script | Shared scripts for partitions and basic disk information |
chromeos-config | CrOS unified build runtime config manager |
chromeos-dbus-bindings | Simplifies the implementation of D-Bus daemons and proxies |
common-mk | Common build & test logic for platform2 projects |
container_utils | Support tools for containers (e.g. device-jail) |
crash-reporter | The system crash handler & reporter |
cromo | modemmanager compatible D-Bus interface to support closed source modem drivers |
cros-disks | Daemon for mounting removable media (e.g. USB sticks and SD cards) |
cros_component | |
crosh | The Chromium OS shell |
cryptohome | Daemon and tools for managing encrypted /home and /var directories |
debugd | Centralized debug daemon for random tools |
disk_updater | Utility for updating root disk firmware (e.g. SSDs and eMMC) |
easy-unlock | Daemon for handling Easy Unlock requests (e.g. unlocking Chromebooks with an Android device) |
feedback | Daemon for headless systems that want to gather feedback (normally Chrome manages it) |
fitpicker | |
gobi-cromo-plugin | plugin for supporting gobi3k modems with cromo |
goldfishd | Android Emulator Daemon |
hammerd | Firmware updater utility for hammer hardware |
image-burner | Daemon for writing disk images (e.g. recovery) to USB sticks & SD cards |
imageloader | Daemon for mounting signed disk images |
init | CrOS common startup init scripts and boot time helpers |
installer | CrOS installer utility (for AU/recovery/etc...) |
ippusb_manager | “Service” for ipp-over-usb printing |
libchromeos-ui | |
libcontainer | |
libpasswordprovider | Password Provider library for securely managing credentials with system services |
libweave | Library for cloud messaging |
login_manager | Session manager for handling the life cycle of the main session (e.g. Chrome) |
lorgnette | Daemon for managing attached USB scanners via SANE |
metrics | Client side user metrics collection |
midis | MIDI service |
mist | Modem USB Interface Switching Tool |
ml | Machine learning service |
modem-utilities | |
modemfwd | Daemon for managing modem firmware updaters |
mtpd | Daemon for handling Media Transfer Protocol (MTP) with devices (e.g. phones) |
p2p | Service for sharing files between CrOS devices (e.g. updates) |
peerd | Daemon for communicating with local peers |
permission_broker | |
power_manager | Userspace power management daemon and associated tools |
regions | |
run_oci | Minimalistic container runtime |
salsa | Touchpad experimentation framework |
secure_erase_file | Helper tools for securely erasing files from storage (e.g. keys and PII data) |
smbprovider | Daemon for connecting Samba / Windows networking shares to the Files.app |
smogcheck | Developer library for working with raw I2C devices |
st_flash | |
storage_info | Helper shell functions for retrieving disk information) |
thd | Thermal daemon to help keep systems running cool |
timberslide | Tool for working with EC crashes for reporting purposes |
touch_firmware_calibration | |
touch_keyboard | Utilities for a touch based virtual keyboard |
tpm2-simulator | A software TPM 2.0 implementation (for testing/debugging) |
tpm_manager | Daemon and client for managing TPM setup and operations |
trim | Service to manage filesystem trim operations in the background |
trunks | Middleware and resource manager for interfacing with TPM 2.0 hardware |
u2fd | U2FHID emulation daemon for systems with secure elements (not TPMs) |
userfeedback | Various utilities to gather extended data for user feedback reports |
userspace_touchpad | |
virtual_file_provider | |
vm_tools | Utilities for Virtual Machine (VM) orchestration |
vpn-manager | |
webserver | Small web server with D-Bus client backends |
wifi-testbed | Tools for creating a WiFi testbed image |
wimax_manager |
These projects can be found here: https://chromium.googlesource.com/aosp/platform/