KVM for Android

Posted Nov 13, 2020 12:12 UTC (Fri) by jezuch (subscriber, #52988)
In reply to: KVM for Android by adam820
Parent article: KVM for Android

That's how I read it too. Currently it's forced upon the user and runs in a super-privileged context with no oversight at all. Sandboxing this code can only benefit the user. (Though I agree that removing it would be best.)

KVM for Android

Posted Nov 13, 2020 13:40 UTC (Fri) by mzyngier (subscriber, #32898) [Link]

That's indeed the goal. We can't really get rid of it (apparently, people really want 4K N*****x on a 15cm screen), but we can move that code to a place where it won't risk harming the rest of the system if it goes mad.

At least, that's the plan.

KVM for Android

Posted Nov 20, 2020 7:49 UTC (Fri) by rmayr (subscriber, #16880) [Link]

Yes, that is one of the main drives - TrustZone (where most of this code lives today) is highly privileged and opaque, and TEE implementations certainly have had their share of vulnerabilities. Sandboxing that code in VMs helps the whole system and therefore users.