ld.config.txt 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348
  1. # Copyright (C) 2017 The Android Open Source Project
  2. #
  3. # Bionic loader config file.
  4. #
  5. # Don't change the order here. The first pattern that matches with the
  6. # absolute path of an executable is selected.
  7. dir.system = /system/bin/
  8. dir.system = /system/xbin/
  9. dir.system = /system/product/bin/
  10. dir.vendor = /odm/bin/
  11. dir.vendor = /vendor/bin/
  12. dir.vendor = /data/nativetest/odm
  13. dir.vendor = /data/nativetest64/odm
  14. dir.vendor = /data/benchmarktest/odm
  15. dir.vendor = /data/benchmarktest64/odm
  16. dir.vendor = /data/nativetest/vendor
  17. dir.vendor = /data/nativetest64/vendor
  18. dir.vendor = /data/benchmarktest/vendor
  19. dir.vendor = /data/benchmarktest64/vendor
  20. dir.system = /data/nativetest
  21. dir.system = /data/nativetest64
  22. dir.system = /data/benchmarktest
  23. dir.system = /data/benchmarktest64
  24. dir.postinstall = /postinstall
  25. [system]
  26. additional.namespaces = sphal,vndk,rs
  27. ###############################################################################
  28. # "default" namespace
  29. #
  30. # Framework-side code runs in this namespace. Libs from /vendor partition
  31. # can't be loaded in this namespace.
  32. ###############################################################################
  33. namespace.default.isolated = true
  34. namespace.default.search.paths = /system/${LIB}
  35. namespace.default.search.paths += /system/product/${LIB}
  36. # We can't have entire /system/${LIB} as permitted paths because doing so
  37. # makes it possible to load libs in /system/${LIB}/vndk* directories by
  38. # their absolute paths (e.g. dlopen("/system/lib/vndk/libbase.so");).
  39. # VNDK libs are built with previous versions of Android and thus must not be
  40. # loaded into this namespace where libs built with the current version of
  41. # Android are loaded. Mixing the two types of libs in the same namespace can
  42. # cause unexpected problem.
  43. namespace.default.permitted.paths = /system/${LIB}/drm
  44. namespace.default.permitted.paths += /system/${LIB}/extractors
  45. namespace.default.permitted.paths += /system/${LIB}/hw
  46. namespace.default.permitted.paths += /system/product/${LIB}
  47. # These are where odex files are located. libart has to be able to dlopen the files
  48. namespace.default.permitted.paths += /system/framework
  49. namespace.default.permitted.paths += /system/app
  50. namespace.default.permitted.paths += /system/priv-app
  51. namespace.default.permitted.paths += /vendor/framework
  52. namespace.default.permitted.paths += /vendor/app
  53. namespace.default.permitted.paths += /vendor/priv-app
  54. namespace.default.permitted.paths += /odm/framework
  55. namespace.default.permitted.paths += /odm/app
  56. namespace.default.permitted.paths += /odm/priv-app
  57. namespace.default.permitted.paths += /oem/app
  58. namespace.default.permitted.paths += /system/product/framework
  59. namespace.default.permitted.paths += /system/product/app
  60. namespace.default.permitted.paths += /system/product/priv-app
  61. namespace.default.permitted.paths += /data
  62. namespace.default.permitted.paths += /mnt/expand
  63. namespace.default.asan.search.paths = /data/asan/system/${LIB}
  64. namespace.default.asan.search.paths += /system/${LIB}
  65. namespace.default.asan.search.paths += /data/asan/product/${LIB}
  66. namespace.default.asan.search.paths += /product/${LIB}
  67. namespace.default.asan.permitted.paths = /data
  68. namespace.default.asan.permitted.paths += /system/${LIB}/drm
  69. namespace.default.asan.permitted.paths += /system/${LIB}/extractors
  70. namespace.default.asan.permitted.paths += /system/${LIB}/hw
  71. namespace.default.asan.permitted.paths += /system/framework
  72. namespace.default.asan.permitted.paths += /system/app
  73. namespace.default.asan.permitted.paths += /system/priv-app
  74. namespace.default.asan.permitted.paths += /vendor/framework
  75. namespace.default.asan.permitted.paths += /vendor/app
  76. namespace.default.asan.permitted.paths += /vendor/priv-app
  77. namespace.default.asan.permitted.paths += /odm/framework
  78. namespace.default.asan.permitted.paths += /odm/app
  79. namespace.default.asan.permitted.paths += /odm/priv-app
  80. namespace.default.asan.permitted.paths += /oem/app
  81. namespace.default.asan.permitted.paths += /system/product/${LIB}
  82. namespace.default.asan.permitted.paths += /system/product/framework
  83. namespace.default.asan.permitted.paths += /system/product/app
  84. namespace.default.asan.permitted.paths += /system/product/priv-app
  85. namespace.default.asan.permitted.paths += /mnt/expand
  86. ###############################################################################
  87. # "sphal" namespace
  88. #
  89. # SP-HAL(Sameprocess-HAL)s are the only vendor libraries that are allowed to be
  90. # loaded inside system processes. libEGL_<chipset>.so, libGLESv2_<chipset>.so,
  91. # android.hardware.graphics.mapper@2.0-impl.so, etc are SP-HALs.
  92. #
  93. # This namespace is exclusivly for SP-HALs. When the framework tries to dynami-
  94. # cally load SP-HALs, android_dlopen_ext() is used to explicitly specifying
  95. # that they should be searched and loaded from this namespace.
  96. #
  97. # Note that there is no link from the default namespace to this namespace.
  98. ###############################################################################
  99. namespace.sphal.isolated = true
  100. namespace.sphal.visible = true
  101. namespace.sphal.search.paths = /odm/${LIB}
  102. namespace.sphal.search.paths += /vendor/${LIB}
  103. namespace.sphal.permitted.paths = /odm/${LIB}
  104. namespace.sphal.permitted.paths += /vendor/${LIB}
  105. namespace.sphal.asan.search.paths = /data/asan/odm/${LIB}
  106. namespace.sphal.asan.search.paths += /odm/${LIB}
  107. namespace.sphal.asan.search.paths += /data/asan/vendor/${LIB}
  108. namespace.sphal.asan.search.paths += /vendor/${LIB}
  109. namespace.sphal.asan.permitted.paths = /data/asan/odm/${LIB}
  110. namespace.sphal.asan.permitted.paths += /odm/${LIB}
  111. namespace.sphal.asan.permitted.paths += /data/asan/vendor/${LIB}
  112. namespace.sphal.asan.permitted.paths += /vendor/${LIB}
  113. # Once in this namespace, access to libraries in /system/lib is restricted. Only
  114. # libs listed here can be used.
  115. namespace.sphal.links = default,vndk,rs
  116. namespace.sphal.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so
  117. namespace.sphal.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so
  118. namespace.sphal.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so
  119. # Renderscript gets separate namespace
  120. namespace.sphal.link.rs.shared_libs = libRS_internal.so
  121. ###############################################################################
  122. # "rs" namespace
  123. #
  124. # This namespace is exclusively for Renderscript internal libraries.
  125. # This namespace has slightly looser restriction than the vndk namespace because
  126. # of the genuine characteristics of Renderscript; /data is in the permitted path
  127. # to load the compiled *.so file and libmediandk.so can be used here.
  128. ###############################################################################
  129. namespace.rs.isolated = true
  130. namespace.rs.visible = true
  131. namespace.rs.search.paths = /odm/${LIB}/vndk-sp
  132. namespace.rs.search.paths += /vendor/${LIB}/vndk-sp
  133. namespace.rs.search.paths += /system/${LIB}/vndk-sp-28
  134. namespace.rs.search.paths += /odm/${LIB}
  135. namespace.rs.search.paths += /vendor/${LIB}
  136. namespace.rs.permitted.paths = /odm/${LIB}
  137. namespace.rs.permitted.paths += /vendor/${LIB}
  138. namespace.rs.permitted.paths += /data
  139. namespace.rs.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp
  140. namespace.rs.asan.search.paths += /odm/${LIB}/vndk-sp
  141. namespace.rs.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp
  142. namespace.rs.asan.search.paths += /vendor/${LIB}/vndk-sp
  143. namespace.rs.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28
  144. namespace.rs.asan.search.paths += /system/${LIB}/vndk-sp-28
  145. namespace.rs.asan.search.paths += /data/asan/odm/${LIB}
  146. namespace.rs.asan.search.paths += /odm/${LIB}
  147. namespace.rs.asan.search.paths += /data/asan/vendor/${LIB}
  148. namespace.rs.asan.search.paths += /vendor/${LIB}
  149. namespace.rs.asan.permitted.paths = /data/asan/odm/${LIB}
  150. namespace.rs.asan.permitted.paths += /odm/${LIB}
  151. namespace.rs.asan.permitted.paths += /data/asan/vendor/${LIB}
  152. namespace.rs.asan.permitted.paths += /vendor/${LIB}
  153. namespace.rs.asan.permitted.paths += /data
  154. namespace.rs.links = default,vndk
  155. namespace.rs.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so
  156. namespace.rs.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so
  157. # Private LLNDK libs (e.g. libft2.so) are exceptionally allowed to this
  158. # namespace because RS framework libs are using them.
  159. namespace.rs.link.default.shared_libs += libft2.so
  160. namespace.rs.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so
  161. ###############################################################################
  162. # "vndk" namespace
  163. #
  164. # This namespace is exclusively for vndk-sp libs.
  165. ###############################################################################
  166. namespace.vndk.isolated = true
  167. namespace.vndk.visible = true
  168. namespace.vndk.search.paths = /odm/${LIB}/vndk-sp
  169. namespace.vndk.search.paths += /vendor/${LIB}/vndk-sp
  170. namespace.vndk.search.paths += /system/${LIB}/vndk-sp-28
  171. namespace.vndk.permitted.paths = /odm/${LIB}/hw
  172. namespace.vndk.permitted.paths += /odm/${LIB}/egl
  173. namespace.vndk.permitted.paths += /vendor/${LIB}/hw
  174. namespace.vndk.permitted.paths += /vendor/${LIB}/egl
  175. # This is exceptionally required since android.hidl.memory@1.0-impl.so is here
  176. namespace.vndk.permitted.paths += /system/${LIB}/vndk-sp-28/hw
  177. namespace.vndk.asan.search.paths = /data/asan/odm/${LIB}/vndk-sp
  178. namespace.vndk.asan.search.paths += /odm/${LIB}/vndk-sp
  179. namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp
  180. namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk-sp
  181. namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28
  182. namespace.vndk.asan.search.paths += /system/${LIB}/vndk-sp-28
  183. namespace.vndk.asan.permitted.paths = /data/asan/odm/${LIB}/hw
  184. namespace.vndk.asan.permitted.paths += /odm/${LIB}/hw
  185. namespace.vndk.asan.permitted.paths += /data/asan/odm/${LIB}/egl
  186. namespace.vndk.asan.permitted.paths += /odm/${LIB}/egl
  187. namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/hw
  188. namespace.vndk.asan.permitted.paths += /vendor/${LIB}/hw
  189. namespace.vndk.asan.permitted.paths += /data/asan/vendor/${LIB}/egl
  190. namespace.vndk.asan.permitted.paths += /vendor/${LIB}/egl
  191. namespace.vndk.asan.permitted.paths += /data/asan/system/${LIB}/vndk-sp-28/hw
  192. namespace.vndk.asan.permitted.paths += /system/${LIB}/vndk-sp-28/hw
  193. # The "vndk" namespace links to "default" namespace for LLNDK libs and links to
  194. # "sphal" namespace for vendor libs. The ordering matters. The "default"
  195. # namespace has higher priority than the "sphal" namespace.
  196. namespace.vndk.links = default,sphal
  197. # When these NDK libs are required inside this namespace, then it is redirected
  198. # to the default namespace. This is possible since their ABI is stable across
  199. # Android releases.
  200. namespace.vndk.link.default.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so
  201. namespace.vndk.link.default.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so
  202. # Allow VNDK-SP extensions to use vendor libraries
  203. namespace.vndk.link.sphal.allow_all_shared_libs = true
  204. ###############################################################################
  205. # Namespace config for vendor processes. In O, no restriction is enforced for
  206. # them. However, in O-MR1, access to /system/${LIB} will not be allowed to
  207. # the default namespace. 'system' namespace will be added to give limited
  208. # (LL-NDK only) access.
  209. ###############################################################################
  210. [vendor]
  211. additional.namespaces = system,vndk
  212. ###############################################################################
  213. # "default" namespace
  214. #
  215. # This is the default linker namespace for a vendor process (a process started
  216. # from /vendor/bin/*). The main executable and the libs under /vendor/lib[64]
  217. # are loaded directly into this namespace. However, other libs under the system
  218. # partition (VNDK and LLNDK libraries) are not loaded here but from the
  219. # separate namespace 'system'. The delegation to the system namespace is done
  220. # via the 'namespace.default.link.system.shared_libs' property below.
  221. ###############################################################################
  222. namespace.default.isolated = true
  223. namespace.default.visible = true
  224. namespace.default.search.paths = /odm/${LIB}
  225. namespace.default.search.paths += /vendor/${LIB}
  226. namespace.default.permitted.paths = /odm
  227. namespace.default.permitted.paths += /vendor
  228. namespace.default.asan.search.paths = /data/asan/odm/${LIB}
  229. namespace.default.asan.search.paths += /odm/${LIB}
  230. namespace.default.asan.search.paths += /data/asan/vendor/${LIB}
  231. namespace.default.asan.search.paths += /vendor/${LIB}
  232. namespace.default.asan.permitted.paths = /data/asan/odm
  233. namespace.default.asan.permitted.paths += /odm
  234. namespace.default.asan.permitted.paths += /data/asan/vendor
  235. namespace.default.asan.permitted.paths += /vendor
  236. namespace.default.links = system,vndk
  237. namespace.default.link.system.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so
  238. namespace.default.link.vndk.shared_libs = android.hardware.graphics.common@1.0.so:android.hardware.graphics.common@1.1.so:android.hardware.graphics.mapper@2.0.so:android.hardware.graphics.mapper@2.1.so:android.hardware.renderscript@1.0.so:android.hidl.memory.token@1.0.so:android.hidl.memory@1.0.so:android.hidl.memory@1.0-impl.so:libRSCpuRef.so:libRSDriver.so:libRS_internal.so:libbase.so:libbcinfo.so:libc++.so:libcutils.so:libhardware.so:libhidlbase.so:libhidlmemory.so:libhidltransport.so:libhwbinder.so:libhwbinder_noltopgo.so:libion.so:liblzma.so:libunwindstack.so:libutils.so:libutilscallstack.so:libz.so
  239. namespace.default.link.vndk.shared_libs += android.frameworks.displayservice@1.0.so:android.frameworks.schedulerservice@1.0.so:android.frameworks.sensorservice@1.0.so:android.frameworks.vr.composer@1.0.so:android.hardware.audio.common-util.so:android.hardware.audio.common@2.0.so:android.hardware.audio.common@2.0-util.so:android.hardware.audio.common@4.0.so:android.hardware.audio.common@4.0-util.so:android.hardware.audio.effect@2.0.so:android.hardware.audio.effect@4.0.so:android.hardware.audio@2.0.so:android.hardware.audio@4.0.so:android.hardware.authsecret@1.0.so:android.hardware.automotive.audiocontrol@1.0.so:android.hardware.automotive.evs@1.0.so:android.hardware.automotive.vehicle@2.0.so:android.hardware.biometrics.fingerprint@2.1.so:android.hardware.bluetooth.a2dp@1.0.so:android.hardware.bluetooth@1.0.so:android.hardware.boot@1.0.so:android.hardware.broadcastradio@1.0.so:android.hardware.broadcastradio@1.1.so:android.hardware.broadcastradio@2.0.so:android.hardware.camera.common@1.0.so:android.hardware.camera.device@1.0.so:android.hardware.camera.device@3.2.so:android.hardware.camera.device@3.3.so:android.hardware.camera.device@3.4.so:android.hardware.camera.metadata@3.2.so:android.hardware.camera.metadata@3.3.so:android.hardware.camera.provider@2.4.so:android.hardware.cas.native@1.0.so:android.hardware.cas@1.0.so:android.hardware.configstore-utils.so:android.hardware.configstore@1.0.so:android.hardware.configstore@1.1.so:android.hardware.confirmationui-support-lib.so:android.hardware.confirmationui@1.0.so:android.hardware.contexthub@1.0.so:android.hardware.drm@1.0.so:android.hardware.drm@1.1.so:android.hardware.dumpstate@1.0.so:android.hardware.gatekeeper@1.0.so:android.hardware.gnss@1.0.so:android.hardware.gnss@1.1.so:android.hardware.graphics.allocator@2.0.so:android.hardware.graphics.bufferqueue@1.0.so:android.hardware.graphics.composer@2.1.so:android.hardware.graphics.composer@2.2.so:android.hardware.health@1.0.so:android.hardware.health@2.0.so:android.hardware.ir@1.0.so:android.hardware.keymaster@3.0.so:android.hardware.keymaster@4.0.so:android.hardware.light@2.0.so:android.hardware.media.bufferpool@1.0.so:android.hardware.media.omx@1.0.so:android.hardware.media@1.0.so:android.hardware.memtrack@1.0.so:android.hardware.neuralnetworks@1.0.so:android.hardware.neuralnetworks@1.1.so:android.hardware.nfc@1.0.so:android.hardware.nfc@1.1.so:android.hardware.oemlock@1.0.so:android.hardware.power@1.0.so:android.hardware.power@1.1.so:android.hardware.power@1.2.so:android.hardware.radio.config@1.0.so:android.hardware.radio.deprecated@1.0.so:android.hardware.radio@1.0.so:android.hardware.radio@1.1.so:android.hardware.radio@1.2.so:android.hardware.secure_element@1.0.so:android.hardware.sensors@1.0.so:android.hardware.soundtrigger@2.0.so:android.hardware.soundtrigger@2.0-core.so:android.hardware.soundtrigger@2.1.so:android.hardware.tetheroffload.config@1.0.so:android.hardware.tetheroffload.control@1.0.so:android.hardware.thermal@1.0.so:android.hardware.thermal@1.1.so:android.hardware.tv.cec@1.0.so:android.hardware.tv.input@1.0.so:android.hardware.usb.gadget@1.0.so:android.hardware.usb@1.0.so:android.hardware.usb@1.1.so:android.hardware.vibrator@1.0.so:android.hardware.vibrator@1.1.so:android.hardware.vibrator@1.2.so:android.hardware.vr@1.0.so:android.hardware.weaver@1.0.so:android.hardware.wifi.hostapd@1.0.so:android.hardware.wifi.offload@1.0.so:android.hardware.wifi.supplicant@1.0.so:android.hardware.wifi.supplicant@1.1.so:android.hardware.wifi@1.0.so:android.hardware.wifi@1.1.so:android.hardware.wifi@1.2.so:android.hidl.allocator@1.0.so:android.hidl.memory.block@1.0.so:android.hidl.token@1.0.so:android.hidl.token@1.0-utils.so:android.system.net.netd@1.0.so:android.system.net.netd@1.1.so:android.system.wifi.keystore@1.0.so:libadf.so:libaudioroute.so:libaudioutils.so:libbinder.so:libc++_shared.so:libcamera_metadata.so:libcap.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.ubsan_standalone-arm-android.so:libcn-cbor.so:libcrypto.so:libcrypto_utils.so:libcurl.so:libdiskconfig.so:libdumpstateutil.so:libevent.so:libexif.so:libexpat.so:libfmq.so:libgatekeeper.so:libhardware_legacy.so:libhidlallocatorutils.so:libhidlcache.so:libjpeg.so:libkeymaster_messages.so:libkeymaster_portable.so:libldacBT_abr.so:libldacBT_enc.so:liblz4.so:libmedia_helper.so:libmedia_omx.so:libmemtrack.so:libminijail.so:libmkbootimg_abi_check.so:libnetutils.so:libnl.so:libopus.so:libozoaudiodecoder.so:libozoaudioencoder.so:libpagemap.so:libpcre2.so:libpiex.so:libpng.so:libpower.so:libprocinfo.so:libprotobuf-cpp-full.so:libprotobuf-cpp-lite.so:libpuresoftkeymasterdevice.so:libradio_metadata.so:libselinux.so:libsoftkeymasterdevice.so:libspeexresampler.so:libspeexresamplercust.so:libsqlite.so:libssl.so:libstagefright_amrnb_common.so:libstagefright_bufferqueue_helper.so:libstagefright_enc_common.so:libstagefright_flacdec.so:libstagefright_foundation.so:libstagefright_omx.so:libstagefright_omx_utils.so:libstagefright_ozodecoder.so:libstagefright_ozoencoder.so:libstagefright_soft_aacdec.so:libstagefright_soft_aacenc.so:libstagefright_soft_amrdec.so:libstagefright_soft_amrnbenc.so:libstagefright_soft_amrwbenc.so:libstagefright_soft_avcdec.so:libstagefright_soft_avcenc.so:libstagefright_soft_flacdec.so:libstagefright_soft_flacenc.so:libstagefright_soft_g711dec.so:libstagefright_soft_gsmdec.so:libstagefright_soft_hevcdec.so:libstagefright_soft_mp3dec.so:libstagefright_soft_mpeg2dec.so:libstagefright_soft_mpeg4dec.so:libstagefright_soft_mpeg4enc.so:libstagefright_soft_opusdec.so:libstagefright_soft_ozodec.so:libstagefright_soft_ozoenc.so:libstagefright_soft_rawdec.so:libstagefright_soft_vorbisdec.so:libstagefright_soft_vpxdec.so:libstagefright_soft_vpxenc.so:libstagefright_xmlparser.so:libsuspend.so:libtinyalsa.so:libtinyxml2.so:libui.so:libusbhost.so:libvixl-arm.so:libvixl-arm64.so:libvorbisidec.so:libwifi-system-iface.so:libxml2.so:libyuv.so:libziparchive.so
  240. ###############################################################################
  241. # "vndk" namespace
  242. #
  243. # This namespace is where VNDK and VNDK-SP libraries are loaded for
  244. # a vendor process.
  245. ###############################################################################
  246. namespace.vndk.isolated = false
  247. namespace.vndk.search.paths = /odm/${LIB}/vndk
  248. namespace.vndk.search.paths += /odm/${LIB}/vndk-sp
  249. namespace.vndk.search.paths += /vendor/${LIB}/vndk
  250. namespace.vndk.search.paths += /vendor/${LIB}/vndk-sp
  251. namespace.vndk.search.paths += /system/${LIB}/vndk-sp-28
  252. namespace.vndk.search.paths += /system/${LIB}/vndk-28
  253. namespace.vndk.asan.search.paths = /data/asan/odm/${LIB}/vndk
  254. namespace.vndk.asan.search.paths += /odm/${LIB}/vndk
  255. namespace.vndk.asan.search.paths += /data/asan/odm/${LIB}/vndk-sp
  256. namespace.vndk.asan.search.paths += /odm/${LIB}/vndk-sp
  257. namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk
  258. namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk
  259. namespace.vndk.asan.search.paths += /data/asan/vendor/${LIB}/vndk-sp
  260. namespace.vndk.asan.search.paths += /vendor/${LIB}/vndk-sp
  261. namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-sp-28
  262. namespace.vndk.asan.search.paths += /system/${LIB}/vndk-sp-28
  263. namespace.vndk.asan.search.paths += /data/asan/system/${LIB}/vndk-28
  264. namespace.vndk.asan.search.paths += /system/${LIB}/vndk-28
  265. # When these NDK libs are required inside this namespace, then it is redirected
  266. # to the system namespace. This is possible since their ABI is stable across
  267. # Android releases.
  268. namespace.vndk.links = system,default
  269. namespace.vndk.link.system.shared_libs = libEGL.so:libGLESv1_CM.so:libGLESv2.so:libGLESv3.so:libRS.so:libandroid_net.so:libc.so:libclang_rt.asan-aarch64-android.so:libclang_rt.asan-arm-android.so:libdl.so:liblog.so:libm.so:libmediandk.so:libnativewindow.so:libneuralnetworks.so:libsync.so:libvndksupport.so:libvulkan.so
  270. namespace.vndk.link.system.shared_libs += libclang_rt.asan-aarch64-android.so:libclang_rt.ubsan_standalone-aarch64-android.so:libclang_rt.tsan-aarch64-android.so:libclang_rt.asan-arm-android.so:libclang_rt.ubsan_standalone-arm-android.so:libclang_rt.tsan-arm-android.so
  271. namespace.vndk.link.default.allow_all_shared_libs = true
  272. ###############################################################################
  273. # "system" namespace
  274. #
  275. # This namespace is where system libs (VNDK and LLNDK libs) are loaded for
  276. # a vendor process.
  277. ###############################################################################
  278. namespace.system.isolated = false
  279. namespace.system.search.paths = /system/${LIB}
  280. namespace.system.search.paths += /system/product/${LIB}
  281. namespace.system.asan.search.paths = /data/asan/system/${LIB}
  282. namespace.system.asan.search.paths += /system/${LIB}
  283. namespace.system.asan.search.paths += /data/asan/product/${LIB}
  284. namespace.system.asan.search.paths += /product/${LIB}
  285. ###############################################################################
  286. # Namespace config for binaries under /postinstall.
  287. # Only one default namespace is defined and it has no directories other than
  288. # /system/lib in the search paths. This is because linker calls realpath on the
  289. # search paths and this causes selinux denial if the paths (/vendor, /odm) are
  290. # not allowed to the poinstall binaries. There is no reason to allow the
  291. # binaries to access the paths.
  292. ###############################################################################
  293. [postinstall]
  294. namespace.default.isolated = false
  295. namespace.default.search.paths = /system/${LIB}
  296. namespace.default.search.paths += /system/product/${LIB}