commit cfb6f3523159d87d444ace1b4c24fa09a11b31f0
author Sandeep Patil <sspatil@google.com> Wed Jun 14 09:57:43 2017 -0700
committer Sandeep Patil <sspatil@google.com> Wed Jun 14 10:01:34 2017 -0700
tree d4a06e096bd4418af8e91d6af10e9e91aa27445f
parent d3381cd9e6d74bb36048818c58533de54dc07fda

build: run neverallow checks on platform sepolicy

This will prevent us from breaking our own neverallow rules
in the platform sepolicy regardless of vendor policy adding
exceptions to the neverallow rules using "*_violators" attributes

Bug: 62616897
Bug: 62343727

Test: Build policy for sailfish
Test: Build policy with radio to rild socket rule enabled for all
      and ensure the build fails

Change-Id: Ic66ec3e10c76a7c9a17669e0d3deb3a1c7b00809
Signed-off-by: Sandeep Patil <sspatil@google.com>

Android.mk

diff --git a/Android.mk b/Android.mk
index 7ab0f44..b1d64f4 100644
--- a/Android.mk
+++ b/Android.mk
@@ -329,7 +329,7 @@
 	@mkdir -p $(dir $@)
 	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -C -c $(POLICYVERS) -o $@ $<
 	$(hide) cat $(PRIVATE_ADDITIONAL_CIL_FILES) >> $@
-	$(hide) $(HOST_OUT_EXECUTABLES)/secilc -M true -G -N -c $(POLICYVERS) $@ -o /dev/null -f /dev/null
+	$(hide) $(HOST_OUT_EXECUTABLES)/secilc -M true -G -c $(POLICYVERS) $@ -o /dev/null -f /dev/null
 
 built_plat_cil := $(LOCAL_BUILT_MODULE)
 plat_policy.conf :=