| commit | 9ebf0c8ecfd03b0e00b8878f776ab35be5de9e80 | [log] [tgz] |
|---|---|---|
| author | Thiébaud Weksteen <tweek@google.com> | Tue Jan 25 21:07:00 2022 +1100 |
| committer | Thiébaud Weksteen <tweek@google.com> | Fri Jan 28 13:51:36 2022 +1100 |
| tree | 2c5065ca74ac9e8b4a5034dfe208298bfefcdf96 | |
| parent | 7423beb1bdd6ab0a1df3dda15ade7cb3f7640f3b [diff] |
Split sepolicy_neverallow rule
sepolicy_neverallow is based on a combination of calling checkpolicy
followed by sepolicy-analyze. If the first tool fails, the error message
associated with the second is returned, which is misleading.
Separate both part of the rule using a new build command.
Bug: 175911415
Test: Modify policy to trigger neverallow (checkpolicy); no misleading
messages from sepolicy-analyze
Change-Id: I5977ced23dee09a28c7df334e4790d212e0db0c1