Blame - Android.mk - android_system_sepolicy

blob: d141c7b33c4a116c9c035385fa8916838f8023d5 [file] [log] [blame]

Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	1	LOCAL_PATH:= $(call my-dir)
William Roberts	f0e0a94	2012-08-27 15:41:15 -0700	[diff] [blame]	2
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	3	include $(CLEAR_VARS)
				4
				5	# SELinux policy version.
Stephen Smalley	b4f1706	2015-03-13 10:03:52 -0400	[diff] [blame]	6	# Must be <= /sys/fs/selinux/policyvers reported by the Android kernel.
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	7	# Must be within the compatibility range reported by checkpolicy -V.
Stephen Smalley	e543a8b	2013-04-01 10:07:43 -0400	[diff] [blame]	8	POLICYVERS ?= 26
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	9
				10	MLS_SENS=1
				11	MLS_CATS=1024
				12
Stephen Smalley	b4f1706	2015-03-13 10:03:52 -0400	[diff] [blame]	13	ifdef BOARD_SEPOLICY_REPLACE
				14	$(error BOARD_SEPOLICY_REPLACE is no longer supported; please remove from your BoardConfig.mk or other .mk file.)
				15	endif
				16
				17	ifdef BOARD_SEPOLICY_IGNORE
				18	$(error BOARD_SEPOLICY_IGNORE is no longer supported; please remove from your BoardConfig.mk or other .mk file.)
				19	endif
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	20
Stephen Smalley	8e0ca88	2015-04-01 10:14:56 -0400	[diff] [blame]	21	ifdef BOARD_SEPOLICY_UNION
				22	$(warning BOARD_SEPOLICY_UNION is no longer required - all files found in BOARD_SEPOLICY_DIRS are implicitly unioned; please remove from your BoardConfig.mk or other .mk file.)
				23	endif
Robert Craig	6b0ff47	2014-01-29 13:10:58 -0500	[diff] [blame]	24
Stephen Smalley	8e0ca88	2015-04-01 10:14:56 -0400	[diff] [blame]	25	# Builds paths for all policy files found in BOARD_SEPOLICY_DIRS.
rpcraig	47cd396	2012-10-17 21:09:52 -0400	[diff] [blame]	26	# $(1): the set of policy name paths to build
Stephen Smalley	8e0ca88	2015-04-01 10:14:56 -0400	[diff] [blame]	27	build_policy = $(foreach type, $(1), $(wildcard $(addsuffix /$(type), $(LOCAL_PATH) $(BOARD_SEPOLICY_DIRS))))
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	28
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	29	sepolicy_build_files := security_classes \
				30	initial_sids \
				31	access_vectors \
				32	global_macros \
Nick Kralevich	a17a266	2014-11-05 15:30:41 -0800	[diff] [blame]	33	neverallow_macros \
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	34	mls_macros \
				35	mls \
				36	policy_capabilities \
				37	te_macros \
				38	attributes \
				39	*.te \
				40	roles \
				41	users \
				42	initial_sid_contexts \
				43	fs_use \
				44	genfs_contexts \
				45	port_contexts
				46
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	47	##################################
				48	include $(CLEAR_VARS)
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	49
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	50	LOCAL_MODULE := sepolicy
				51	LOCAL_MODULE_CLASS := ETC
				52	LOCAL_MODULE_TAGS := optional
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	53	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	54
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	55	include $(BUILD_SYSTEM)/base_rules.mk
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	56
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	57	sepolicy_policy.conf := $(intermediates)/policy.conf
				58	$(sepolicy_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS)
				59	$(sepolicy_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS)
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	60	$(sepolicy_policy.conf): $(call build_policy, $(sepolicy_build_files))
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	61	@mkdir -p $(dir $@)
Nick Kralevich	623975f	2014-01-11 01:31:03 -0800	[diff] [blame]	62	$(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
				63	-D target_build_variant=$(TARGET_BUILD_VARIANT) \
Nick Kralevich	623975f	2014-01-11 01:31:03 -0800	[diff] [blame]	64	-s $^ > $@
Robert Craig	65d4f44	2013-03-27 06:30:25 -0400	[diff] [blame]	65	$(hide) sed '/dontaudit/d' $@ > $@.dontaudit
Stephen Smalley	2dd4e51	2012-01-04 12:33:27 -0500	[diff] [blame]	66
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	67	$(LOCAL_BUILT_MODULE): $(sepolicy_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	68	@mkdir -p $(dir $@)
Ying Wang	f4ea5b2	2012-04-09 15:31:03 -0700	[diff] [blame]	69	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $<
Robert Craig	65d4f44	2013-03-27 06:30:25 -0400	[diff] [blame]	70	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $(dir $<)/$(notdir $@).dontaudit $<.dontaudit
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	71
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	72	built_sepolicy := $(LOCAL_BUILT_MODULE)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	73	sepolicy_policy.conf :=
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	74
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	75	##################################
				76	include $(CLEAR_VARS)
				77
				78	LOCAL_MODULE := sepolicy.recovery
				79	LOCAL_MODULE_CLASS := ETC
				80	LOCAL_MODULE_TAGS := eng
				81
				82	include $(BUILD_SYSTEM)/base_rules.mk
				83
				84	sepolicy_policy_recovery.conf := $(intermediates)/policy_recovery.conf
				85	$(sepolicy_policy_recovery.conf): PRIVATE_MLS_SENS := $(MLS_SENS)
				86	$(sepolicy_policy_recovery.conf): PRIVATE_MLS_CATS := $(MLS_CATS)
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	87	$(sepolicy_policy_recovery.conf): $(call build_policy, $(sepolicy_build_files))
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	88	@mkdir -p $(dir $@)
				89	$(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
				90	-D target_build_variant=$(TARGET_BUILD_VARIANT) \
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	91	-D target_recovery=true \
				92	-s $^ > $@
				93
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	94	$(LOCAL_BUILT_MODULE): $(sepolicy_policy_recovery.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
Stephen Smalley	e60723a	2014-05-29 16:40:15 -0400	[diff] [blame]	95	@mkdir -p $(dir $@)
				96	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $<
				97
				98	built_sepolicy_recovery := $(LOCAL_BUILT_MODULE)
				99	sepolicy_policy_recovery.conf :=
				100
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	101	##################################
				102	include $(CLEAR_VARS)
				103
				104	LOCAL_MODULE := general_sepolicy.conf
				105	LOCAL_MODULE_CLASS := ETC
				106	LOCAL_MODULE_TAGS := tests
				107
				108	include $(BUILD_SYSTEM)/base_rules.mk
				109
				110	exp_sepolicy_build_files :=\
				111	$(wildcard $(addprefix $(LOCAL_PATH)/, $(sepolicy_build_files)))
				112
				113	$(LOCAL_BUILT_MODULE): PRIVATE_MLS_SENS := $(MLS_SENS)
				114	$(LOCAL_BUILT_MODULE): PRIVATE_MLS_CATS := $(MLS_CATS)
				115	$(LOCAL_BUILT_MODULE): $(exp_sepolicy_build_files)
				116	mkdir -p $(dir $@)
				117	$(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \
				118	-D target_build_variant=user \
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	119	-s $^ > $@
				120	$(hide) sed '/dontaudit/d' $@ > $@.dontaudit
				121
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	122	built_general_sepolicy.conf := $(LOCAL_BUILT_MODULE)
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	123	exp_sepolicy_build_files :=
				124
				125	##################################
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	126	include $(CLEAR_VARS)
				127
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	128	LOCAL_MODULE := sepolicy.general
				129	LOCAL_MODULE_CLASS := ETC
				130	LOCAL_MODULE_TAGS := tests
				131
				132	include $(BUILD_SYSTEM)/base_rules.mk
				133
				134	$(LOCAL_BUILT_MODULE): PRIVATE_BUILT_SEPOLICY.CONF := $(built_general_sepolicy.conf)
				135	$(LOCAL_BUILT_MODULE): $(built_general_sepolicy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy
				136	@mkdir -p $(dir $@)
				137	$(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $(PRIVATE_BUILT_SEPOLICY.CONF)
				138
				139	built_general_sepolicy := $(LOCAL_BUILT_MODULE)
				140	##################################
				141	include $(CLEAR_VARS)
				142
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	143	LOCAL_MODULE := file_contexts
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	144	LOCAL_MODULE_CLASS := ETC
				145	LOCAL_MODULE_TAGS := optional
				146	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				147
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	148	include $(BUILD_SYSTEM)/base_rules.mk
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	149
Evgenii Stepanov	9303048	2015-06-12 17:18:20 -0700	[diff] [blame]	150	FILE_CONTEXTS := file_contexts
				151	ifeq (address,$(strip $(SANITIZE_TARGET)))
				152	FILE_CONTEXTS := $(FILE_CONTEXTS) file_contexts_asan
				153	endif
				154	ALL_FC_FILES := $(call build_policy, $(FILE_CONTEXTS))
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	155
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	156	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				157	$(LOCAL_BUILT_MODULE): $(ALL_FC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	158	@mkdir -p $(dir $@)
Stephen Smalley	01a58af	2012-10-02 12:46:37 -0400	[diff] [blame]	159	$(hide) m4 -s $(ALL_FC_FILES) > $@
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	160	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $@
Stephen Smalley	5b340be	2012-03-06 11:12:41 -0500	[diff] [blame]	161
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	162	built_fc := $(LOCAL_BUILT_MODULE)
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	163
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	164	##################################
				165	include $(CLEAR_VARS)
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	166
				167	LOCAL_MODULE := general_file_contexts
				168	LOCAL_MODULE_CLASS := ETC
				169	LOCAL_MODULE_TAGS := tests
				170
				171	include $(BUILD_SYSTEM)/base_rules.mk
				172
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	173	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				174	$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, file_contexts) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	175	@mkdir -p $(dir $@)
				176	$(hide) m4 -s $< > $@
				177	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $@
				178
				179	GENERAL_FILE_CONTEXTS := $(LOCAL_BUILT_MODULE)
				180
				181	##################################
				182	include $(CLEAR_VARS)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	183	LOCAL_MODULE := seapp_contexts
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	184	LOCAL_MODULE_CLASS := ETC
				185	LOCAL_MODULE_TAGS := optional
				186	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				187
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	188	include $(BUILD_SYSTEM)/base_rules.mk
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	189
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	190	all_sc_files := $(call build_policy, seapp_contexts)
William Roberts	171a062	2012-08-16 10:55:05 -0700	[diff] [blame]	191
Ying Wang	d8b122c	2012-10-25 19:01:31 -0700	[diff] [blame]	192	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	193	$(LOCAL_BUILT_MODULE): PRIVATE_SC_FILES := $(all_sc_files)
				194	$(LOCAL_BUILT_MODULE): $(built_sepolicy) $(all_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp
William Roberts	f0e0a94	2012-08-27 15:41:15 -0700	[diff] [blame]	195	@mkdir -p $(dir $@)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	196	$(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILES)
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	197
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	198	built_sc := $(LOCAL_BUILT_MODULE)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	199	all_sc_files :=
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	200
Ying Wang	02fb5f3	2012-01-17 17:51:09 -0800	[diff] [blame]	201	##################################
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	202	include $(CLEAR_VARS)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	203	LOCAL_MODULE := general_seapp_contexts
				204	LOCAL_MODULE_CLASS := ETC
				205	LOCAL_MODULE_TAGS := tests
				206
				207	include $(BUILD_SYSTEM)/base_rules.mk
				208
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	209	all_sc_files := $(addprefix $(LOCAL_PATH)/, seapp_contexts)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	210
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	211	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	212	$(LOCAL_BUILT_MODULE): PRIVATE_SC_FILE := $(all_sc_files)
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	213	$(LOCAL_BUILT_MODULE): $(built_general_sepolicy) $(all_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	214	@mkdir -p $(dir $@)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	215	$(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILE)
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	216
				217	GENERAL_SEAPP_CONTEXTS := $(LOCAL_BUILT_MODULE)
William Roberts	81e1f90	2015-06-03 21:57:47 -0700	[diff] [blame]	218	all_sc_files :=
Stephen Smalley	3771287	2015-03-12 15:46:36 -0400	[diff] [blame]	219
				220	##################################
				221	include $(CLEAR_VARS)
William Roberts	4ee7131	2015-06-25 11:59:30 -0700	[diff] [blame]	222	LOCAL_MODULE := general_seapp_neverallows
				223	LOCAL_MODULE_CLASS := ETC
				224	LOCAL_MODULE_TAGS := tests
				225
				226	include $(BUILD_SYSTEM)/base_rules.mk
				227
				228	$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, seapp_contexts)
				229	@mkdir -p $(dir $@)
				230	- $(hide) grep -ie '^neverallow' $< > $@
				231
				232	GENERAL_SEAPP_NEVERALLOWS := $(LOCAL_BUILT_MODULE)
				233
				234	##################################
				235	include $(CLEAR_VARS)
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	236
				237	LOCAL_MODULE := property_contexts
				238	LOCAL_MODULE_CLASS := ETC
				239	LOCAL_MODULE_TAGS := optional
				240	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				241
				242	include $(BUILD_SYSTEM)/base_rules.mk
				243
Robert Craig	d98d26e	2013-01-23 14:04:50 -0500	[diff] [blame]	244	ALL_PC_FILES := $(call build_policy, property_contexts)
				245
				246	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				247	$(LOCAL_BUILT_MODULE): $(ALL_PC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	248	@mkdir -p $(dir $@)
Robert Craig	d98d26e	2013-01-23 14:04:50 -0500	[diff] [blame]	249	$(hide) m4 -s $(ALL_PC_FILES) > $@
				250	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	251
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	252	built_pc := $(LOCAL_BUILT_MODULE)
				253
Stephen Smalley	124720a	2012-04-04 10:11:16 -0400	[diff] [blame]	254	##################################
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	255	include $(CLEAR_VARS)
				256
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	257	LOCAL_MODULE := general_property_contexts
				258	LOCAL_MODULE_CLASS := ETC
				259	LOCAL_MODULE_TAGS := tests
				260
Stephen Smalley	c936173	2015-03-13 09:36:57 -0400	[diff] [blame]	261	include $(BUILD_SYSTEM)/base_rules.mk
				262
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	263	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				264	$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, property_contexts) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	265	@mkdir -p $(dir $@)
				266	$(hide) m4 -s $< > $@
				267	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@
				268
				269	GENERAL_PROPERTY_CONTEXTS := $(LOCAL_BUILT_MODULE)
				270
				271	##################################
				272	include $(CLEAR_VARS)
				273
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	274	LOCAL_MODULE := service_contexts
				275	LOCAL_MODULE_CLASS := ETC
				276	LOCAL_MODULE_TAGS := optional
				277	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				278
				279	include $(BUILD_SYSTEM)/base_rules.mk
				280
				281	ALL_SVC_FILES := $(call build_policy, service_contexts)
				282
				283	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy)
				284	$(LOCAL_BUILT_MODULE): $(ALL_SVC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
				285	@mkdir -p $(dir $@)
				286	$(hide) m4 -s $(ALL_SVC_FILES) > $@
				287	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@
				288
				289	built_svc := $(LOCAL_BUILT_MODULE)
				290
				291	##################################
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	292	include $(CLEAR_VARS)
				293
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	294	LOCAL_MODULE := general_service_contexts
				295	LOCAL_MODULE_CLASS := ETC
				296	LOCAL_MODULE_TAGS := tests
				297
				298	include $(BUILD_SYSTEM)/base_rules.mk
				299
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	300	$(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_general_sepolicy)
				301	$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, service_contexts) $(built_general_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc
Stephen Smalley	2e0cd5a	2015-03-12 17:45:03 -0400	[diff] [blame]	302	@mkdir -p $(dir $@)
				303	$(hide) m4 -s $< > $@
				304	$(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@
				305
				306	GENERAL_SERVICE_CONTEXTS := $(LOCAL_BUILT_MODULE)
				307
				308	##################################
				309	include $(CLEAR_VARS)
				310
Robert Craig	7f2392e	2013-03-27 08:35:39 -0400	[diff] [blame]	311	LOCAL_MODULE := mac_permissions.xml
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	312	LOCAL_MODULE_CLASS := ETC
				313	LOCAL_MODULE_TAGS := optional
				314	LOCAL_MODULE_PATH := $(TARGET_OUT_ETC)/security
				315
William Roberts	2c8a55d	2012-11-30 14:59:09 -0800	[diff] [blame]	316	include $(BUILD_SYSTEM)/base_rules.mk
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	317
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	318	# Build keys.conf
				319	mac_perms_keys.tmp := $(intermediates)/keys.tmp
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	320	$(mac_perms_keys.tmp): $(call build_policy, keys.conf)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	321	@mkdir -p $(dir $@)
				322	$(hide) m4 -s $^ > $@
				323
Robert Craig	7f2392e	2013-03-27 08:35:39 -0400	[diff] [blame]	324	ALL_MAC_PERMS_FILES := $(call build_policy, $(LOCAL_MODULE))
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	325
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	326	$(LOCAL_BUILT_MODULE): $(mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys.py $(ALL_MAC_PERMS_FILES)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	327	@mkdir -p $(dir $@)
Nick Kralevich	c3c9052	2013-10-25 12:25:36 -0700	[diff] [blame]	328	$(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \
				329	$(HOST_OUT_EXECUTABLES)/insertkeys.py -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(ALL_MAC_PERMS_FILES)
Geremy Condra	cd4104e	2013-03-26 18:19:12 +0000	[diff] [blame]	330
Robert Craig	7f2392e	2013-03-27 08:35:39 -0400	[diff] [blame]	331	mac_perms_keys.tmp :=
rpcraig	b19665c	2012-07-30 09:33:03 -0400	[diff] [blame]	332	##################################
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	333	include $(CLEAR_VARS)
				334
				335	LOCAL_MODULE := selinux_version
				336	LOCAL_MODULE_CLASS := ETC
				337	LOCAL_MODULE_TAGS := optional
				338	LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT)
				339
				340	include $(BUILD_SYSTEM)/base_rules.mk
William Roberts	da52e85	2015-06-27 07:22:34 -0700	[diff] [blame]	341	$(LOCAL_BUILT_MODULE): $(built_sepolicy) $(built_pc) $(built_fc) $(built_sc) $(built_svc)
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	342	@mkdir -p $(dir $@)
				343	$(hide) echo -n $(BUILD_FINGERPRINT) > $@
				344
				345	##################################
rpcraig	47cd396	2012-10-17 21:09:52 -0400	[diff] [blame]	346
				347	build_policy :=
dcashman	704741a	2014-07-25 19:11:52 -0700	[diff] [blame]	348	sepolicy_build_files :=
Robert Craig	8b7545b	2014-03-20 09:35:08 -0400	[diff] [blame]	349	built_sepolicy :=
				350	built_sc :=
				351	built_fc :=
				352	built_pc :=
Riley Spahn	f90c41f	2014-06-05 15:52:02 -0700	[diff] [blame]	353	built_svc :=
William Roberts	b876993	2015-06-29 16:31:23 -0700	[diff] [blame^]	354	built_general_sepolicy :=
				355	built_general_sepolicy.conf :=
Alice Chu	cdfb06f	2012-11-01 11:33:04 -0700	[diff] [blame]	356
				357	include $(call all-makefiles-under,$(LOCAL_PATH))