Create new conditional userdebug_or_eng
Create a new m4 macro called userdebug_or_eng. Arguments
passed to this macro are only emitted if we're performing
a userdebug or eng build.
Merge shell.te and shell_user.te and eliminate duplicate
lines. Same for su.te and su_user.te
Change-Id: I8fbabca65ec392aeafd5b90cef57b5066033fad0
diff --git a/su.te b/su.te
index 2a3d007..b4b9f6d 100644
--- a/su.te
+++ b/su.te
@@ -1,13 +1,17 @@
-type su, domain;
+# File types must be defined for file_contexts.
type su_exec, exec_type, file_type;
-domain_auto_trans(shell, su_exec, su)
-# Allow dumpstate to call su on userdebug / eng builds to collect
-# additional information.
-domain_auto_trans(dumpstate, su_exec, su)
+userdebug_or_eng(`
+ type su, domain;
+ domain_auto_trans(shell, su_exec, su)
-# su is unconfined.
-unconfined_domain(su)
+ # Allow dumpstate to call su on userdebug / eng builds to collect
+ # additional information.
+ domain_auto_trans(dumpstate, su_exec, su)
-# su is also permissive to permit setenforce.
-permissive su;
+ # su is unconfined.
+ unconfined_domain(su)
+
+ # su is also permissive to permit setenforce.
+ permissive su;
+')