Build recovery policy with Android.bp
Bug: 33691272
Test: enter recovery mode
Change-Id: Ifc38ed99e6615431d81ade76ec10ea4d34fbbf90
diff --git a/Android.bp b/Android.bp
index 874e96f..438b13f 100644
--- a/Android.bp
+++ b/Android.bp
@@ -817,6 +817,32 @@
],
}
+// policy for recovery
+se_policy_conf {
+ name: "recovery_sepolicy.conf",
+ srcs: plat_policies_for_vendor + [
+ ":se_build_files{.plat_vendor_for_vendor}",
+ ":se_build_files{.vendor}",
+ ":se_build_files{.odm}",
+ ],
+ target_recovery: true,
+ installable: false,
+}
+
+se_policy_cil {
+ name: "recovery_sepolicy.cil",
+ src: ":recovery_sepolicy.conf",
+ secilc_check: false, // will be done in se_policy_binary module
+ installable: false,
+}
+
+se_policy_binary {
+ name: "sepolicy.recovery",
+ srcs: [":recovery_sepolicy.cil"],
+ stem: "sepolicy",
+ recovery: true,
+}
+
//////////////////////////////////
// SELinux policy embedded into CTS.
// CTS checks neverallow rules of this policy against the policy of the device under test.