Add product variable SelinuxIgnoreNeverallows for sepolicy
Bug: 350881031
Test: Presubmits
Change-Id: Ide2eaf95ec33686f785fc197a4cf8a75c666bd8a
diff --git a/android/module.go b/android/module.go
index 39c257c..4785a91 100644
--- a/android/module.go
+++ b/android/module.go
@@ -2216,6 +2216,8 @@
case "use_debug_art":
// TODO(b/234351700): Remove once ART does not have separated debug APEX
return proptools.ConfigurableValueBool(ctx.Config().UseDebugArt())
+ case "selinux_ignore_neverallows":
+ return proptools.ConfigurableValueBool(ctx.Config().SelinuxIgnoreNeverallows())
default:
// TODO(b/323382414): Might add these on a case-by-case basis
ctx.OtherModulePropertyErrorf(m, property, fmt.Sprintf("TODO(b/323382414): Product variable %q is not yet supported in selects", variable))
diff --git a/android/variable.go b/android/variable.go
index df0e59c..88218d7 100644
--- a/android/variable.go
+++ b/android/variable.go
@@ -192,6 +192,9 @@
Required []string
Vintf_fragments []string
}
+ SelinuxIgnoreNeverallows struct {
+ Required []string
+ }
} `android:"arch_variant"`
}