Blame - Android.mk - android_system_sepolicy

blob: 95a19daa2abf974117407fb6120dcadea8f945f3 [file] [log] [blame]

Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	1	LOCAL_PATH:= $(call my-dir)
William Roberts	f0e0a94	2012-08-27 15:41:15 -0700	[diff] [blame]	2
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	3	include $(CLEAR_VARS)
				4
				5	# SELinux policy version.
Stephen Smalley	b4f1706	2015-03-13 10:03:52 -0400	[diff] [blame]	6	# Must be <= /sys/fs/selinux/policyvers reported by the Android kernel.
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	7	# Must be within the compatibility range reported by checkpolicy -V.
Stephen Smalley	e543a8b	2013-04-01 10:07:43 -0400	[diff] [blame]	8	POLICYVERS ?= 26
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	9
				10	MLS_SENS=1
				11	MLS_CATS=1024
				12
Stephen Smalley	b4f1706	2015-03-13 10:03:52 -0400	[diff] [blame]	13	ifdef BOARD_SEPOLICY_REPLACE
				14	$(error BOARD_SEPOLICY_REPLACE is no longer supported; please remove from your BoardConfig.mk or other .mk file.)
				15	endif
				16
				17	ifdef BOARD_SEPOLICY_IGNORE
				18	$(error BOARD_SEPOLICY_IGNORE is no longer supported; please remove from your BoardConfig.mk or other .mk file.)
				19	endif
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	20
Stephen Smalley	8e0ca88	2015-04-01 10:14:56 -0400	[diff] [blame]	21	ifdef BOARD_SEPOLICY_UNION
				22	$(warning BOARD_SEPOLICY_UNION is no longer required - all files found in BOARD_SEPOLICY_DIRS are implicitly unioned; please remove from your BoardConfig.mk or other .mk file.)
				23	endif
Robert Craig	6b0ff47	2014-01-29 13:10:58 -0500	[diff] [blame]	24
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	25	ifdef BOARD_SEPOLICY_M4DEFS
				26	LOCAL_ADDITIONAL_M4DEFS := $(addprefix -D, $(BOARD_SEPOLICY_M4DEFS))
				27	endif
				28
Stephen Smalley	8e0ca88	2015-04-01 10:14:56 -0400	[diff] [blame]	29	# Builds paths for all policy files found in BOARD_SEPOLICY_DIRS.
rpcraig	47cd396	2012-10-17 21:09:52 -0400	[diff] [blame]	30	# $(1): the set of policy name paths to build
Dan Willemsen	bc2a49f	2015-08-10 15:40:52 -0700	[diff] [blame]	31	build_policy = $(foreach type, $(1), $(foreach file, $(addsuffix /$(type), $(LOCAL_PATH) $(BOARD_SEPOLICY_DIRS)), $(sort $(wildcard $(file)))))
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	32
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	33	sepolicy_build_files := security_classes \
				34	initial_sids \
				35	access_vectors \
				36	global_macros \
Nick Kralevich	a17a266	2014-11-05 15:30:41 -0800	[diff] [blame]	37	neverallow_macros \
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	38	mls_macros \
				39	mls \
				40	policy_capabilities \
				41	te_macros \
				42	attributes \
				43	*.te \
				44	roles \
				45	users \
				46	initial_sid_contexts \
				47	fs_use \
				48	genfs_contexts \
				49	port_contexts
				50
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	51	##################################
				52	include $(CLEAR_VARS)
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	53
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	54	LOCAL_MODULE := sepolicy
				55	LOCAL_MODULE_CLASS := ETC
				56	LOCAL_MODULE_TAGS := optional
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	57	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	58
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	59	include $(BUILD_SYSTEM)/base_rules.mk
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	60
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	61	sepolicy_policy.conf := $(intermediates)/policy.conf
				62	$(sepolicy_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS)
				63	$(sepolicy_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	64	$(sepolicy_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	65	$(sepolicy_policy.conf): $(call build_policy, $(sepolicy_build_files))
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	66	@mkdir -p $(dir $@)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	67	$(hide) m4 $(PRIVATE_ADDITIONAL_M4DEFS) \
				68	-D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
Nick Kralevich	623975f	2014-01-11 01:31:03 -0800	[diff] [blame]	69	-D target_build_variant=$(TARGET_BUILD_VARIANT) \
Nick Kralevich	623975f	2014-01-11 01:31:03 -0800	[diff] [blame]	70	-s $^ > $@
Robert Craig	65d4f44	2013-03-27 06:30:25 -0400	[diff] [blame]	71	$(hide) sed '/dontaudit/d' $@ > $@.dontaudit
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	72
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	73	$(LOCAL_BUILT_MODULE): $(sepolicy_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	74	@mkdir -p $(dir $@)
Ying Wang	f4ea5b2	2012-04-09 15:31:03 -0700	[diff] [blame]	75	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $<
Robert Craig	65d4f44	2013-03-27 06:30:25 -0400	[diff] [blame]	76	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $(dir $<)/$(notdir $@).dontaudit $<.dontaudit
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	77
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	78	built_sepolicy := $(LOCAL_BUILT_MODULE)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	79	sepolicy_policy.conf :=
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	80
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	81	##################################
				82	include $(CLEAR_VARS)
				83
				84	LOCAL_MODULE := sepolicy.recovery
				85	LOCAL_MODULE_CLASS := ETC
				86	LOCAL_MODULE_TAGS := eng
				87
				88	include $(BUILD_SYSTEM)/base_rules.mk
				89
				90	sepolicy_policy_recovery.conf := $(intermediates)/policy_recovery.conf
				91	$(sepolicy_policy_recovery.conf): PRIVATE_MLS_SENS := $(MLS_SENS)
				92	$(sepolicy_policy_recovery.conf): PRIVATE_MLS_CATS := $(MLS_CATS)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	93	$(sepolicy_policy_recovery.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	94	$(sepolicy_policy_recovery.conf): $(call build_policy, $(sepolicy_build_files))
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	95	@mkdir -p $(dir $@)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	96	$(hide) m4 $(PRIVATE_ADDITIONAL_M4DEFS) \
				97	-D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	98	-D target_build_variant=$(TARGET_BUILD_VARIANT) \
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	99	-D target_recovery=true \
				100	-s $^ > $@
				101
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	102	$(LOCAL_BUILT_MODULE): $(sepolicy_policy_recovery.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	103	@mkdir -p $(dir $@)
				104	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $<
				105
				106	built_sepolicy_recovery := $(LOCAL_BUILT_MODULE)
				107	sepolicy_policy_recovery.conf :=
				108
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	109	##################################
				110	include $(CLEAR_VARS)
				111
				112	LOCAL_MODULE := general_sepolicy.conf
				113	LOCAL_MODULE_CLASS := ETC
				114	LOCAL_MODULE_TAGS := tests
				115
				116	include $(BUILD_SYSTEM)/base_rules.mk
				117
				118	exp_sepolicy_build_files :=\
Dan Willemsen	bc2a49f	2015-08-10 15:40:52 -0700	[diff] [blame]	119	$(foreach file, $(addprefix $(LOCAL_PATH)/, $(sepolicy_build_files)), $(sort $(wildcard $(file))))
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	120
				121	$(LOCAL_BUILT_MODULE): PRIVATE_MLS_SENS := $(MLS_SENS)
				122	$(LOCAL_BUILT_MODULE): PRIVATE_MLS_CATS := $(MLS_CATS)
				123	$(LOCAL_BUILT_MODULE): $(exp_sepolicy_build_files)
				124	mkdir -p $(dir $@)
				125	$(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
				126	-D target_build_variant=user \
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	127	-s $^ > $@
				128	$(hide) sed '/dontaudit/d' $@ > $@.dontaudit
				129
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame]	130	built_general_sepolicy.conf := $(LOCAL_BUILT_MODULE)
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	131	exp_sepolicy_build_files :=
				132
				133	##################################
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	134	include $(CLEAR_VARS)
				135
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame]	136	LOCAL_MODULE := sepolicy.general
				137	LOCAL_MODULE_CLASS := ETC
				138	LOCAL_MODULE_TAGS := tests
				139
				140	include $(BUILD_SYSTEM)/base_rules.mk
				141
				142	$(LOCAL_BUILT_MODULE): PRIVATE_BUILT_SEPOLICY.CONF := $(built_general_sepolicy.conf)
				143	$(LOCAL_BUILT_MODULE): $(built_general_sepolicy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
				144	@mkdir -p $(dir $@)
				145	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $(PRIVATE_BUILT_SEPOLICY.CONF)
				146
				147	built_general_sepolicy := $(LOCAL_BUILT_MODULE)
				148	##################################
				149	include $(CLEAR_VARS)
				150
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	151	LOCAL_MODULE := file_contexts.bin
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	152	LOCAL_MODULE_CLASS := ETC
				153	LOCAL_MODULE_TAGS := optional
				154	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				155
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	156	include $(BUILD_SYSTEM)/base_rules.mk
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	157
William Roberts	ffc86be	2015-06-29 11:16:18 -0700	[diff] [blame]	158	all_fc_files := file_contexts
Ivan Krasin	9aa4130	2015-09-18 12:05:51 -0700	[diff] [blame]	159	ifneq ($(filter address,$(SANITIZE_TARGET)),)
William Roberts	ffc86be	2015-06-29 11:16:18 -0700	[diff] [blame]	160	all_fc_files := $(all_fc_files) file_contexts_asan
Evgenii Stepanov	9303048	2015-06-12 17:18:20 -0700	[diff] [blame]	161	endif
William Roberts	ffc86be	2015-06-29 11:16:18 -0700	[diff] [blame]	162	all_fc_files := $(call build_policy, $(all_fc_files))
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	163
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	164	file_contexts.tmp := $(intermediates)/file_contexts.tmp
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	165	$(file_contexts.tmp): PRIVATE_FC_FILES := $(all_fc_files)
				166	$(file_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	167	$(file_contexts.tmp): $(all_fc_files)
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	168	@mkdir -p $(dir $@)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	169	$(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_FC_FILES) > $@
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	170
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	171	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				172	$(LOCAL_BUILT_MODULE): $(file_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/sefcontext_compile $(HOST_OUT_EXECUTABLES)/checkfc
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	173	@mkdir -p $(dir $@)
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	174	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $<
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	175	$(hide) $(HOST_OUT_EXECUTABLES)/sefcontext_compile -o $@ $<
				176
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	177	built_fc := $(LOCAL_BUILT_MODULE)
William Roberts	ffc86be	2015-06-29 11:16:18 -0700	[diff] [blame]	178	all_fc_files :=
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	179	file_contexts.tmp :=
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	180
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	181	##################################
				182	include $(CLEAR_VARS)
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	183
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	184	LOCAL_MODULE := general_file_contexts.bin
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	185	LOCAL_MODULE_CLASS := ETC
				186	LOCAL_MODULE_TAGS := tests
				187
				188	include $(BUILD_SYSTEM)/base_rules.mk
				189
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	190	general_file_contexts.tmp := $(intermediates)/general_file_contexts.tmp
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	191	$(general_file_contexts.tmp): $(addprefix $(LOCAL_PATH)/, file_contexts)
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	192	@mkdir -p $(dir $@)
				193	$(hide) m4 -s $< > $@
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	194
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	195	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				196	$(LOCAL_BUILT_MODULE): $(general_file_contexts.tmp) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/sefcontext_compile $(HOST_OUT_EXECUTABLES)/checkfc
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	197	@mkdir -p $(dir $@)
William Roberts	3746a0a	2015-09-25 10:18:44 -0700	[diff] [blame]	198	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $<
Richard Haines	c2d0191	2015-08-06 17:43:52 +0100	[diff] [blame]	199	$(hide) $(HOST_OUT_EXECUTABLES)/sefcontext_compile -o $@ $<
				200
				201	general_file_contexts.tmp :=
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	202
				203	##################################
				204	include $(CLEAR_VARS)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	205	LOCAL_MODULE := seapp_contexts
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	206	LOCAL_MODULE_CLASS := ETC
				207	LOCAL_MODULE_TAGS := optional
				208	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				209
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	210	include $(BUILD_SYSTEM)/base_rules.mk
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	211
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	212	all_sc_files := $(call build_policy, seapp_contexts)
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	213
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	214	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	215	$(LOCAL_BUILT_MODULE): PRIVATE_SC_FILES := $(all_sc_files)
				216	$(LOCAL_BUILT_MODULE): $(built_sepolicy) $(all_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp
William Roberts	f0e0a94	2012-08-27 15:41:15 -0700	[diff] [blame]	217	@mkdir -p $(dir $@)
William Roberts	99fe8df	2015-06-30 13:53:51 -0700	[diff] [blame]	218	$(hide) $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILES)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	219
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	220	built_sc := $(LOCAL_BUILT_MODULE)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	221	all_sc_files :=
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	222
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	223	##################################
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	224	include $(CLEAR_VARS)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	225	LOCAL_MODULE := general_seapp_contexts
				226	LOCAL_MODULE_CLASS := ETC
				227	LOCAL_MODULE_TAGS := tests
				228
				229	include $(BUILD_SYSTEM)/base_rules.mk
				230
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	231	all_sc_files := $(addprefix $(LOCAL_PATH)/, seapp_contexts)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	232
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame]	233	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	234	$(LOCAL_BUILT_MODULE): PRIVATE_SC_FILE := $(all_sc_files)
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame]	235	$(LOCAL_BUILT_MODULE): $(built_general_sepolicy) $(all_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	236	@mkdir -p $(dir $@)
William Roberts	99fe8df	2015-06-30 13:53:51 -0700	[diff] [blame]	237	$(hide) $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILE)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	238
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	239	all_sc_files :=
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	240
				241	##################################
				242	include $(CLEAR_VARS)
William Roberts	4ee7131	2015-06-25 11:59:30 -0700	[diff] [blame]	243	LOCAL_MODULE := general_seapp_neverallows
				244	LOCAL_MODULE_CLASS := ETC
				245	LOCAL_MODULE_TAGS := tests
				246
				247	include $(BUILD_SYSTEM)/base_rules.mk
				248
				249	$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, seapp_contexts)
				250	@mkdir -p $(dir $@)
				251	- $(hide) grep -ie '^neverallow' $< > $@
				252
William Roberts	4ee7131	2015-06-25 11:59:30 -0700	[diff] [blame]	253
				254	##################################
				255	include $(CLEAR_VARS)
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	256
				257	LOCAL_MODULE := property_contexts
				258	LOCAL_MODULE_CLASS := ETC
				259	LOCAL_MODULE_TAGS := optional
				260	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				261
				262	include $(BUILD_SYSTEM)/base_rules.mk
				263
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	264	all_pc_files := $(call build_policy, property_contexts)
				265
William Roberts	dcffd2b	2015-09-29 13:52:37 -0700	[diff] [blame]	266	property_contexts.tmp := $(intermediates)/property_contexts.tmp
				267	$(property_contexts.tmp): PRIVATE_PC_FILES := $(all_pc_files)
				268	$(property_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
				269	$(property_contexts.tmp): $(all_pc_files)
William Roberts	7f81b33	2015-09-29 13:52:37 -0700	[diff] [blame]	270	@mkdir -p $(dir $@)
Colin Cross	9eb6c87	2015-10-01 21:25:09 +0000	[diff] [blame]	271	$(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_PC_FILES) > $@
William Roberts	dcffd2b	2015-09-29 13:52:37 -0700	[diff] [blame]	272
				273
				274	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				275	$(LOCAL_BUILT_MODULE): $(property_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP)
				276	@mkdir -p $(dir $@)
				277	$(hide) $(ACP) $< $@
				278	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $<
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	279
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	280	built_pc := $(LOCAL_BUILT_MODULE)
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	281	all_pc_files :=
William Roberts	dcffd2b	2015-09-29 13:52:37 -0700	[diff] [blame]	282	property_contexts.tmp :=
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	283
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	284	##################################
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	285	include $(CLEAR_VARS)
				286
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	287	LOCAL_MODULE := general_property_contexts
				288	LOCAL_MODULE_CLASS := ETC
				289	LOCAL_MODULE_TAGS := tests
				290
Stephen Smalley	c936173	2015-03-13 09:36:57 -0400	[diff] [blame]	291	include $(BUILD_SYSTEM)/base_rules.mk
				292
William Roberts	dcffd2b	2015-09-29 13:52:37 -0700	[diff] [blame]	293	general_property_contexts.tmp := $(intermediates)/general_property_contexts.tmp
				294	$(general_property_contexts.tmp): $(addprefix $(LOCAL_PATH)/, property_contexts)
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	295	@mkdir -p $(dir $@)
				296	$(hide) m4 -s $< > $@
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	297
William Roberts	dcffd2b	2015-09-29 13:52:37 -0700	[diff] [blame]	298	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				299	$(LOCAL_BUILT_MODULE): $(general_property_contexts.tmp) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP)
				300	@mkdir -p $(dir $@)
				301	$(hide) $(ACP) $< $@
				302	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $<
				303
				304	general_property_contexts.tmp :=
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	305
				306	##################################
				307	include $(CLEAR_VARS)
				308
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	309	LOCAL_MODULE := service_contexts
				310	LOCAL_MODULE_CLASS := ETC
				311	LOCAL_MODULE_TAGS := optional
				312	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				313
				314	include $(BUILD_SYSTEM)/base_rules.mk
				315
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	316	all_svc_files := $(call build_policy, service_contexts)
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	317
William Roberts	7fc865a	2015-09-29 14:17:38 -0700	[diff] [blame^]	318	service_contexts.tmp := $(intermediates)/service_contexts.tmp
				319	$(service_contexts.tmp): PRIVATE_SVC_FILES := $(all_svc_files)
				320	$(service_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
				321	$(service_contexts.tmp): $(all_svc_files)
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	322	@mkdir -p $(dir $@)
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	323	$(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@
William Roberts	7fc865a	2015-09-29 14:17:38 -0700	[diff] [blame^]	324
				325	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				326	$(LOCAL_BUILT_MODULE): $(service_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP)
				327	@mkdir -p $(dir $@)
				328	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $<
				329	$(hide) $(ACP) $< $@
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	330
				331	built_svc := $(LOCAL_BUILT_MODULE)
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	332	all_svc_files :=
William Roberts	7fc865a	2015-09-29 14:17:38 -0700	[diff] [blame^]	333	service_contexts.tmp :=
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	334
				335	##################################
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	336	include $(CLEAR_VARS)
				337
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	338	LOCAL_MODULE := general_service_contexts
				339	LOCAL_MODULE_CLASS := ETC
				340	LOCAL_MODULE_TAGS := tests
				341
				342	include $(BUILD_SYSTEM)/base_rules.mk
				343
William Roberts	7fc865a	2015-09-29 14:17:38 -0700	[diff] [blame^]	344	general_service_contexts.tmp := $(intermediates)/general_service_contexts.tmp
				345	$(general_service_contexts.tmp): $(addprefix $(LOCAL_PATH)/, service_contexts)
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	346	@mkdir -p $(dir $@)
				347	$(hide) m4 -s $< > $@
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	348
William Roberts	7fc865a	2015-09-29 14:17:38 -0700	[diff] [blame^]	349	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				350	$(LOCAL_BUILT_MODULE): $(general_service_contexts.tmp) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP)
				351	@mkdir -p $(dir $@)
				352	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $<
				353	$(hide) $(ACP) $< $@
				354
				355	general_service_contexts.tmp :=
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	356
				357	##################################
				358	include $(CLEAR_VARS)
				359
Robert Craig	7f2392e	2013-03-27 08:35:39 -0400	[diff] [blame]	360	LOCAL_MODULE := mac_permissions.xml
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	361	LOCAL_MODULE_CLASS := ETC
				362	LOCAL_MODULE_TAGS := optional
				363	LOCAL_MODULE_PATH := $(TARGET_OUT_ETC)/security
				364
William Roberts	2c8a55d	2012-11-30 14:59:09 -0800	[diff] [blame]	365	include $(BUILD_SYSTEM)/base_rules.mk
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	366
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	367	# Build keys.conf
				368	mac_perms_keys.tmp := $(intermediates)/keys.tmp
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	369	$(mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	370	$(mac_perms_keys.tmp): $(call build_policy, keys.conf)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	371	@mkdir -p $(dir $@)
William Roberts	d218558	2015-07-16 11:28:02 -0700	[diff] [blame]	372	$(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $^ > $@
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	373
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	374	all_mac_perms_files := $(call build_policy, $(LOCAL_MODULE))
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	375
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	376	$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_mac_perms_files)
				377	$(LOCAL_BUILT_MODULE): $(mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys.py $(all_mac_perms_files)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	378	@mkdir -p $(dir $@)
Nick Kralevich	c3c9052	2013-10-25 12:25:36 -0700	[diff] [blame]	379	$(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	380	$(HOST_OUT_EXECUTABLES)/insertkeys.py -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	381
Robert Craig	7f2392e	2013-03-27 08:35:39 -0400	[diff] [blame]	382	mac_perms_keys.tmp :=
William Roberts	6aabc1c	2015-07-30 11:44:26 -0700	[diff] [blame]	383	all_mac_perms_files :=
				384
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	385	##################################
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	386	include $(CLEAR_VARS)
				387
				388	LOCAL_MODULE := selinux_version
				389	LOCAL_MODULE_CLASS := ETC
				390	LOCAL_MODULE_TAGS := optional
				391	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				392
				393	include $(BUILD_SYSTEM)/base_rules.mk
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	394	$(LOCAL_BUILT_MODULE): $(built_sepolicy) $(built_pc) $(built_fc) $(built_sc) $(built_svc)
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	395	@mkdir -p $(dir $@)
Colin Cross	29a463d	2015-07-17 13:08:41 -0700	[diff] [blame]	396	$(hide) echo -n $(BUILD_FINGERPRINT_FROM_FILE) > $@
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	397
				398	##################################
rpcraig	47cd396	2012-10-17 21:09:52 -0400	[diff] [blame]	399
				400	build_policy :=
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	401	sepolicy_build_files :=
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	402	built_sepolicy :=
				403	built_sc :=
				404	built_fc :=
				405	built_pc :=
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	406	built_svc :=
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame]	407	built_general_sepolicy :=
				408	built_general_sepolicy.conf :=
Alice Chu	cdfb06f	2012-11-01 11:33:04 -0700	[diff] [blame]	409
				410	include $(call all-makefiles-under,$(LOCAL_PATH))