Don't check seapp violations for U or prior
Bug: 280547417
Test: build
Change-Id: Ie71d7b4884f4e6981bd1d78bb0586111dc4fc72a
diff --git a/build/soong/selinux_contexts.go b/build/soong/selinux_contexts.go
index 644a2dd..f3fb33c 100644
--- a/build/soong/selinux_contexts.go
+++ b/build/soong/selinux_contexts.go
@@ -440,8 +440,10 @@
Inputs(inputs).
Input(neverallowFile)
- if ctx.SocSpecific() || ctx.DeviceSpecific() {
- checkCmd.Flag("-c") // check coredomain
+ shippingApiLevel := ctx.DeviceConfig().ShippingApiLevel()
+ ApiLevelU := android.ApiLevelOrPanic(ctx, "UpsideDownCake")
+ if (ctx.SocSpecific() || ctx.DeviceSpecific()) && shippingApiLevel.GreaterThan(ApiLevelU) {
+ checkCmd.Flag("-c") // check coredomain for V (or later) launching devices
}
rule.Build("seapp_contexts", "Building seapp_contexts: "+m.Name())