@ -4,6 +4,8 @@ This repository contains recommended Anbox configuration to run the program as s
Many users misconfigure Anbox to run in privileged mode which permits real root access for Android system processes to a Linux system. Configuration in this repository contains proper settings to run Anbox in _unprivileged mode_, thus better protecting your Linux system from possibly malicious Android processes.
Additionally, this repository provides feature-patched Android OS image file for Anbox, and several other improvements.
`PKGBUILD` file is Arch Linux specific file. Otherwise, you can use rest of the files on any Linux distribution.
## Anbox files
@ -12,7 +14,7 @@ Many files have originally been provided by [anbox-git AUR package](https://aur.
@ -20,7 +22,7 @@ Many files have originally been provided by [anbox-git AUR package](https://aur.
- Removed `IPMasquerade=yes` entry from `[Address]` section. Depending on your network topology, you may want to keep this option. I don't need or use it.
#### [anbox-container-manager.service](anbox_files/anbox-container-manager.service) (Systemd service file)
#### # [anbox-container-manager.service](anbox_files/anbox-container-manager.service) (Systemd service file)
- Changed `[Service]` entry `ExecStart=...` from
@ -43,20 +45,22 @@ Wants=lxc.service
After=lxc.service
```
#### [anbox-session-manager.service](anbox_files/anbox-session-manager.service) (Systemd service file)
#### # [anbox-session-manager.service](anbox_files/anbox-session-manager.service) (Systemd service file)
LXC container user and group mapping files `/etc/subuid` and `/etc/subgid` for Android OS container.
#### anbox-session-manager (shell script)
#### # anbox-session-manager (shell script)
Simple wrapper script to be added into desktop startup program configuration. This is a simple work around script. If `anbox-session-manager` Systemd service is launched _before_ X11 session, launching the X11 session fails for unknown reasons. This script ensures that X11 session is launched _before_`anbox-session-manager` Systemd service.