Merge "Add product variable SelinuxIgnoreNeverallows for sepolicy" into main
diff --git a/android/module.go b/android/module.go
index 51e7f36..8415118 100644
--- a/android/module.go
+++ b/android/module.go
@@ -2347,6 +2347,8 @@
case "use_debug_art":
// TODO(b/234351700): Remove once ART does not have separated debug APEX
return proptools.ConfigurableValueBool(ctx.Config().UseDebugArt())
+ case "selinux_ignore_neverallows":
+ return proptools.ConfigurableValueBool(ctx.Config().SelinuxIgnoreNeverallows())
default:
// TODO(b/323382414): Might add these on a case-by-case basis
ctx.OtherModulePropertyErrorf(m, property, fmt.Sprintf("TODO(b/323382414): Product variable %q is not yet supported in selects", variable))
diff --git a/android/variable.go b/android/variable.go
index 5aa74bd..4210f67 100644
--- a/android/variable.go
+++ b/android/variable.go
@@ -193,6 +193,9 @@
Required []string
Vintf_fragment_modules []string
}
+ SelinuxIgnoreNeverallows struct {
+ Required []string
+ }
} `android:"arch_variant"`
}