From ddf4dc8452e458f1c3199bc8fb767a6ae167c01c Mon Sep 17 00:00:00 2001 From: ojhunt Date: Mon, 17 Jun 2019 18:48:13 -0700 Subject: [PATCH] Update component manifests for ambient replace-as-executable (flutter/engine#9350) Bug: SEC-314 dding this feature all fuchsia components as a pre-flight step as we restrict the ability for arbitrary processes to make VMOs executable. --- .../dart/examples/goodbye_dart/meta/goodbye_dart_aot.cmx | 4 +++- .../dart/examples/goodbye_dart/meta/goodbye_dart_jit.cmx | 4 +++- .../dart/examples/hello_app_dart/meta/hello_app_dart_aot.cmx | 4 +++- .../dart/examples/hello_app_dart/meta/hello_app_dart_jit.cmx | 4 +++- .../fuchsia/dart/examples/hello_dart/meta/hello_dart_aot.cmx | 4 +++- .../dart/examples/hello_dart/meta/hello_dart_aot_product.cmx | 4 +++- .../dart/examples/hello_dart/meta/hello_dart_debug.cmx | 4 +++- .../fuchsia/dart/examples/hello_dart/meta/hello_dart_jit.cmx | 4 +++- .../dart/examples/hello_dart/meta/hello_dart_jit_product.cmx | 4 +++- .../fuchsia/dart/integration/meta/dart_aot_runner_test.cmx | 3 +++ .../fuchsia/dart/integration/meta/dart_jit_runner_test.cmx | 3 +++ .../platform/fuchsia/dart/meta/dart_aot_product_runner.cmx | 1 + .../shell/platform/fuchsia/dart/meta/dart_aot_runner.cmx | 3 ++- .../platform/fuchsia/dart/meta/dart_jit_product_runner.cmx | 1 + .../shell/platform/fuchsia/dart/meta/dart_jit_runner.cmx | 3 ++- .../shell/platform/fuchsia/dart/meta/dart_zircon_test.cmx | 1 + .../shell/platform/fuchsia/dart/vmservice/meta/vmservice.cmx | 3 +++ .../fuchsia/flutter/meta/flutter_aot_product_runner.cmx | 3 ++- .../platform/fuchsia/flutter/meta/flutter_aot_runner.cmx | 3 ++- .../fuchsia/flutter/meta/flutter_jit_product_runner.cmx | 3 ++- .../platform/fuchsia/flutter/meta/flutter_jit_runner.cmx | 3 ++- .../platform/fuchsia/flutter/meta/flutter_runner_tests.cmx | 3 +++ 22 files changed, 54 insertions(+), 15 deletions(-) diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_aot.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_aot.cmx index c2d2112f14..27e194e22e 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_aot.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_aot.cmx @@ -3,7 +3,9 @@ "data": "data/goodbye_dart_aot" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_jit.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_jit.cmx index 296167c381..6a86e73ff7 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_jit.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/goodbye_dart/meta/goodbye_dart_jit.cmx @@ -3,7 +3,9 @@ "data": "data/goodbye_dart_jit" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_aot.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_aot.cmx index 6046d17c17..68e8054f8a 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_aot.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_aot.cmx @@ -3,7 +3,9 @@ "data": "data/hello_app_dart_aot" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_jit.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_jit.cmx index b8ff06f0a5..c22b19ebfe 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_jit.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_app_dart/meta/hello_app_dart_jit.cmx @@ -3,7 +3,9 @@ "data": "data/hello_app_dart_jit" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot.cmx index 7f95a4c133..55828a914c 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot.cmx @@ -3,7 +3,9 @@ "data": "data/hello_dart_aot" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot_product.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot_product.cmx index 8df0f57c4f..91d46add65 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot_product.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_aot_product.cmx @@ -3,7 +3,9 @@ "data": "data/hello_dart_aot_product" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_debug.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_debug.cmx index 4a7426b8d4..57448353c9 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_debug.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_debug.cmx @@ -3,7 +3,9 @@ "data": "data/hello_dart_debug" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit.cmx index feccd66dda..3c9167be52 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit.cmx @@ -3,7 +3,9 @@ "data": "data/hello_dart_jit" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit_product.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit_product.cmx index fa55e46c67..fa6222f837 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit_product.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/examples/hello_dart/meta/hello_dart_jit_product.cmx @@ -3,7 +3,9 @@ "data": "data/hello_dart_jit_product" }, "sandbox": { - "features": [], + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Environment" ] diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_aot_runner_test.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_aot_runner_test.cmx index 3f4d17b0d0..4e49997515 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_aot_runner_test.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_aot_runner_test.cmx @@ -3,6 +3,9 @@ "data": "data/dart_aot_runner_test" }, "sandbox": { + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.cobalt.LoggerFactory", "fuchsia.fonts.Provider", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_jit_runner_test.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_jit_runner_test.cmx index f1b6913527..7c85007e37 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_jit_runner_test.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/integration/meta/dart_jit_runner_test.cmx @@ -3,6 +3,9 @@ "data": "data/dart_jit_runner_test" }, "sandbox": { + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.cobalt.LoggerFactory", "fuchsia.fonts.Provider", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_product_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_product_runner.cmx index aa5a3e1775..b2bc080511 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_product_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_product_runner.cmx @@ -5,6 +5,7 @@ "sandbox": { "features": [ "root-ssl-certificates" + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_runner.cmx index aa5a3e1775..0eded73d7b 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_aot_runner.cmx @@ -4,7 +4,8 @@ }, "sandbox": { "features": [ - "root-ssl-certificates" + "root-ssl-certificates", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_product_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_product_runner.cmx index e28f9a97fc..3a0246c51b 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_product_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_product_runner.cmx @@ -5,6 +5,7 @@ "sandbox": { "features": [ "root-ssl-certificates" + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_runner.cmx index e28f9a97fc..b95198e727 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_jit_runner.cmx @@ -4,7 +4,8 @@ }, "sandbox": { "features": [ - "root-ssl-certificates" + "root-ssl-certificates", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_zircon_test.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_zircon_test.cmx index 531309ed42..fa0f46132f 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_zircon_test.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/meta/dart_zircon_test.cmx @@ -5,6 +5,7 @@ "sandbox": { "features": [ "root-ssl-certificates" + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.sys.Environment" diff --git a/engine/src/flutter/shell/platform/fuchsia/dart/vmservice/meta/vmservice.cmx b/engine/src/flutter/shell/platform/fuchsia/dart/vmservice/meta/vmservice.cmx index e609c7d5d2..9602ffd1df 100644 --- a/engine/src/flutter/shell/platform/fuchsia/dart/vmservice/meta/vmservice.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/dart/vmservice/meta/vmservice.cmx @@ -3,6 +3,9 @@ "data": "data/vmservice" }, "sandbox": { + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.cobalt.LoggerFactory", "fuchsia.fonts.Provider", diff --git a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_product_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_product_runner.cmx index 6e6a4c9287..5d914665de 100644 --- a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_product_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_product_runner.cmx @@ -5,7 +5,8 @@ "sandbox": { "features": [ "root-ssl-certificates", - "vulkan" + "vulkan", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_runner.cmx index 6e6a4c9287..5d914665de 100644 --- a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_aot_runner.cmx @@ -5,7 +5,8 @@ "sandbox": { "features": [ "root-ssl-certificates", - "vulkan" + "vulkan", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_product_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_product_runner.cmx index 008e385a39..688954d023 100644 --- a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_product_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_product_runner.cmx @@ -5,7 +5,8 @@ "sandbox": { "features": [ "root-ssl-certificates", - "vulkan" + "vulkan", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.device.manager.Administrator", diff --git a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_runner.cmx b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_runner.cmx index 6e6a4c9287..5d914665de 100644 --- a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_runner.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_jit_runner.cmx @@ -5,7 +5,8 @@ "sandbox": { "features": [ "root-ssl-certificates", - "vulkan" + "vulkan", + "deprecated-ambient-replace-as-executable" ], "services": [ "fuchsia.crash.Analyzer", diff --git a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_runner_tests.cmx b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_runner_tests.cmx index c66080b254..f606b8d8f7 100644 --- a/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_runner_tests.cmx +++ b/engine/src/flutter/shell/platform/fuchsia/flutter/meta/flutter_runner_tests.cmx @@ -3,6 +3,9 @@ "binary": "test/flutter_runner_tests" }, "sandbox": { + "features": [ + "deprecated-ambient-replace-as-executable" + ], "services": [ "fuchsia.sys.Launcher" ]