Use privileged helper process to mount images.

Uses a privileged helper process to mount images, so that the untrusted
data is only read by the non-root, sandboxed main process.

BUG=chromium:682968
CQ-DEPEND=CL:434201
TEST=test_that -b ${BOARD} ${DUT_ip} platform_ImageLoaderServer

Change-Id: I7aa12d998065c0c2c81628f23ed52505333b4e8c
Reviewed-on: https://chromium-review.googlesource.com/434126
Commit-Ready: Greg Kerr <kerrnel@chromium.org>
Tested-by: Greg Kerr <kerrnel@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
24 files changed
tree: 1a9286c1be9cb183d9d23ecbb06996187ebc55f0
  1. .presubmitignore
  2. README.md
  3. component.cc
  4. component.h
  5. component_unittest.cc
  6. dbus_adaptors/
  7. dbus_permissions/
  8. dbus_service/
  9. helper_process.cc
  10. helper_process.h
  11. imageloader.cc
  12. imageloader.conf
  13. imageloader.gyp
  14. imageloader.h
  15. imageloader_impl.cc
  16. imageloader_impl.h
  17. imageloader_main.cc
  18. imageloader_unittest.cc
  19. imageloader_wrapper
  20. ipc.proto
  21. mock_helper_process.h
  22. mock_verity_mounter.h
  23. mount_helper.cc
  24. mount_helper.h
  25. public_keys/
  26. run_tests.cc
  27. seccomp/
  28. test_utilities.cc
  29. test_utilities.h
  30. testdata/
  31. verity_mounter.cc
  32. verity_mounter.h
README.md

src/platform/imageloader

This aims to provide a generic utility to verify and load (mount) signed disk images through DBUS IPC.

Binaries

  • imageloader

imageloader handles the mounting of disk images. imageloader should be executed via the imageloader_wrapper script, which ensures that imageloader's storage exists and is owned by imageloaderd user. When imageloader is not running, DBus will automatically invoke it. After 20 seconds of inactivity, the service exits.