Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 1 | LOCAL_PATH:= $(call my-dir) |
William Roberts | f0e0a94 | 2012-08-27 15:41:15 -0700 | [diff] [blame] | 2 | |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 3 | include $(LOCAL_PATH)/definitions.mk |
| 4 | |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 5 | include $(CLEAR_VARS) |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 6 | # SELinux policy version. |
Stephen Smalley | b4f1706 | 2015-03-13 10:03:52 -0400 | [diff] [blame] | 7 | # Must be <= /sys/fs/selinux/policyvers reported by the Android kernel. |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 8 | # Must be within the compatibility range reported by checkpolicy -V. |
Jeff Vander Stoep | 3a0ce49 | 2015-12-07 08:30:43 -0800 | [diff] [blame] | 9 | POLICYVERS ?= 30 |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 10 | |
| 11 | MLS_SENS=1 |
| 12 | MLS_CATS=1024 |
| 13 | |
Stephen Smalley | b4f1706 | 2015-03-13 10:03:52 -0400 | [diff] [blame] | 14 | ifdef BOARD_SEPOLICY_REPLACE |
| 15 | $(error BOARD_SEPOLICY_REPLACE is no longer supported; please remove from your BoardConfig.mk or other .mk file.) |
| 16 | endif |
| 17 | |
| 18 | ifdef BOARD_SEPOLICY_IGNORE |
| 19 | $(error BOARD_SEPOLICY_IGNORE is no longer supported; please remove from your BoardConfig.mk or other .mk file.) |
| 20 | endif |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 21 | |
Stephen Smalley | 8e0ca88 | 2015-04-01 10:14:56 -0400 | [diff] [blame] | 22 | ifdef BOARD_SEPOLICY_UNION |
| 23 | $(warning BOARD_SEPOLICY_UNION is no longer required - all files found in BOARD_SEPOLICY_DIRS are implicitly unioned; please remove from your BoardConfig.mk or other .mk file.) |
| 24 | endif |
Robert Craig | 6b0ff47 | 2014-01-29 13:10:58 -0500 | [diff] [blame] | 25 | |
William Roberts | d218558 | 2015-07-16 11:28:02 -0700 | [diff] [blame] | 26 | ifdef BOARD_SEPOLICY_M4DEFS |
| 27 | LOCAL_ADDITIONAL_M4DEFS := $(addprefix -D, $(BOARD_SEPOLICY_M4DEFS)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 28 | else |
| 29 | LOCAL_ADDITIONAL_M4DEFS := |
William Roberts | d218558 | 2015-07-16 11:28:02 -0700 | [diff] [blame] | 30 | endif |
| 31 | |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 32 | # sepolicy is now divided into multiple portions: |
| 33 | # public - policy exported on which non-platform policy developers may write |
| 34 | # additional policy. types and attributes are versioned and included in |
| 35 | # delivered non-platform policy, which is to be combined with platform policy. |
| 36 | # private - platform-only policy required for platform functionality but which |
| 37 | # is not exported to vendor policy developers and as such may not be assumed |
| 38 | # to exist. |
Alex Klyubin | 5596172 | 2017-01-30 18:44:59 -0800 | [diff] [blame] | 39 | # vendor - vendor-only policy required for vendor functionality. This policy can |
| 40 | # reference the public policy but cannot reference the private policy. This |
| 41 | # policy is for components which are produced from the core/non-vendor tree and |
| 42 | # placed into a vendor partition. |
dcashman | 0779155 | 2016-12-07 11:27:47 -0800 | [diff] [blame] | 43 | # mapping - This contains policy statements which map the attributes |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 44 | # exposed in the public policy of previous versions to the concrete types used |
| 45 | # in this policy to ensure that policy targeting attributes from public |
| 46 | # policy from an older platform version continues to work. |
| 47 | |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 48 | # build process for device: |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 49 | # 1) convert policies to CIL: |
| 50 | # - private + public platform policy to CIL |
| 51 | # - mapping file to CIL (should already be in CIL form) |
| 52 | # - non-platform public policy to CIL |
| 53 | # - non-platform public + private policy to CIL |
| 54 | # 2) attributize policy |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 55 | # - run script which takes non-platform public and non-platform combined |
| 56 | # private + public policy and produces attributized and versioned |
| 57 | # non-platform policy |
| 58 | # 3) combine policy files |
| 59 | # - combine mapping, platform and non-platform policy. |
| 60 | # - compile output binary policy file |
| 61 | |
| 62 | PLAT_PUBLIC_POLICY := $(LOCAL_PATH)/public |
Dan Cashman | 51455fe | 2017-05-23 14:47:16 -0700 | [diff] [blame] | 63 | ifneq ( ,$(BOARD_PLAT_PUBLIC_SEPOLICY_DIR)) |
| 64 | ifneq (1, $(words $(BOARD_PLAT_PUBLIC_SEPOLICY_DIR))) |
| 65 | $(error BOARD_PLAT_PUBLIC_SEPOLICY_DIR must only contain one directory) |
| 66 | else |
| 67 | PLAT_PUBLIC_POLICY += $(BOARD_PLAT_PUBLIC_SEPOLICY_DIR) |
| 68 | endif |
| 69 | endif |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 70 | PLAT_PRIVATE_POLICY := $(LOCAL_PATH)/private |
Dan Cashman | 51455fe | 2017-05-23 14:47:16 -0700 | [diff] [blame] | 71 | ifneq ( ,$(BOARD_PLAT_PRIVATE_SEPOLICY_DIR)) |
| 72 | ifneq (1, $(words $(BOARD_PLAT_PRIVATE_SEPOLICY_DIR))) |
| 73 | $(error BOARD_PLAT_PRIVATE_SEPOLICY_DIR must only contain one directory) |
| 74 | else |
| 75 | PLAT_PRIVATE_POLICY += $(BOARD_PLAT_PRIVATE_SEPOLICY_DIR) |
| 76 | endif |
| 77 | endif |
Alex Klyubin | 5596172 | 2017-01-30 18:44:59 -0800 | [diff] [blame] | 78 | PLAT_VENDOR_POLICY := $(LOCAL_PATH)/vendor |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 79 | REQD_MASK_POLICY := $(LOCAL_PATH)/reqd_mask |
| 80 | |
| 81 | # TODO: move to README when doing the README update and finalizing versioning. |
Sandeep Patil | 42f9598 | 2017-04-07 14:18:48 -0700 | [diff] [blame] | 82 | # BOARD_SEPOLICY_VERS must take the format "NN.m" and contain the sepolicy |
| 83 | # version identifier corresponding to the sepolicy on which the non-platform |
| 84 | # policy is to be based. If unspecified, this will build against the current |
| 85 | # public platform policy in tree |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 86 | ifndef BOARD_SEPOLICY_VERS |
| 87 | $(warning BOARD_SEPOLICY_VERS not specified, assuming current platform version) |
Sandeep Patil | 42f9598 | 2017-04-07 14:18:48 -0700 | [diff] [blame] | 88 | # The default platform policy version. |
Dan Cashman | 6f14f6b | 2017-04-07 16:36:23 -0700 | [diff] [blame] | 89 | BOARD_SEPOLICY_VERS := $(PLATFORM_SEPOLICY_VERSION) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 90 | endif |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 91 | |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 92 | NEVERALLOW_ARG := |
| 93 | ifeq ($(SELINUX_IGNORE_NEVERALLOWS),true) |
| 94 | ifeq ($(TARGET_BUILD_VARIANT),user) |
| 95 | $(error SELINUX_IGNORE_NEVERALLOWS := true cannot be used in user builds) |
| 96 | endif |
| 97 | $(warning Be careful when using the SELINUX_IGNORE_NEVERALLOWS flag. \ |
| 98 | It does not work in user builds and using it will \ |
| 99 | not stop you from failing CTS.) |
| 100 | NEVERALLOW_ARG := -N |
| 101 | endif |
| 102 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 103 | # BOARD_SEPOLICY_DIRS was used for vendor/odm sepolicy customization before. |
| 104 | # It has been replaced by BOARD_VENDOR_SEPOLICY_DIRS (mandatory) and |
| 105 | # BOARD_ODM_SEPOLICY_DIRS (optional). BOARD_SEPOLICY_DIRS is still allowed for |
| 106 | # backward compatibility, which will be merged into BOARD_VENDOR_SEPOLICY_DIRS. |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 107 | ifdef BOARD_SEPOLICY_DIRS |
| 108 | BOARD_VENDOR_SEPOLICY_DIRS += $(BOARD_SEPOLICY_DIRS) |
| 109 | endif |
Dan Cashman | 4d24a77 | 2017-04-12 14:28:34 -0700 | [diff] [blame] | 110 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 111 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 112 | ifneq ($(PRODUCT_SEPOLICY_SPLIT),true) |
| 113 | $(error PRODUCT_SEPOLICY_SPLIT needs to be true when using BOARD_ODM_SEPOLICY_DIRS) |
| 114 | endif |
| 115 | endif |
| 116 | |
Dan Cashman | 4d24a77 | 2017-04-12 14:28:34 -0700 | [diff] [blame] | 117 | platform_mapping_file := $(BOARD_SEPOLICY_VERS).cil |
| 118 | |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 119 | ########################################################### |
| 120 | # Compute policy files to be used in policy build. |
| 121 | # $(1): files to include |
| 122 | # $(2): directories in which to find files |
| 123 | ########################################################### |
| 124 | |
| 125 | define build_policy |
| 126 | $(foreach type, $(1), $(foreach file, $(addsuffix /$(type), $(2)), $(sort $(wildcard $(file))))) |
| 127 | endef |
William Roberts | 29d1468 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 128 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 129 | # Builds paths for all policy files found in BOARD_VENDOR_SEPOLICY_DIRS. |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 130 | # $(1): the set of policy name paths to build |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 131 | build_vendor_policy = $(call build_policy, $(1), $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS)) |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 132 | |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 133 | # Builds paths for all policy files found in BOARD_ODM_SEPOLICY_DIRS. |
| 134 | build_odm_policy = $(call build_policy, $(1), $(BOARD_ODM_SEPOLICY_DIRS)) |
| 135 | |
Richard Haines | c8801fe | 2015-12-11 10:39:19 +0000 | [diff] [blame] | 136 | # Add a file containing only a newline in-between each policy configuration |
| 137 | # 'contexts' file. This will allow OEM policy configuration files without a |
| 138 | # final newline (0x0A) to be built correctly by the m4(1) macro processor. |
| 139 | # $(1): the set of contexts file names. |
| 140 | # $(2): the file containing only 0x0A. |
| 141 | add_nl = $(foreach entry, $(1), $(subst $(entry), $(entry) $(2), $(entry))) |
| 142 | |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 143 | sepolicy_build_files := security_classes \ |
| 144 | initial_sids \ |
| 145 | access_vectors \ |
| 146 | global_macros \ |
Nick Kralevich | a17a266 | 2014-11-05 15:30:41 -0800 | [diff] [blame] | 147 | neverallow_macros \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 148 | mls_macros \ |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 149 | mls_decl \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 150 | mls \ |
| 151 | policy_capabilities \ |
| 152 | te_macros \ |
| 153 | attributes \ |
Jeff Vander Stoep | cbaa2b7 | 2015-12-22 10:39:34 -0800 | [diff] [blame] | 154 | ioctl_defines \ |
Jeff Vander Stoep | de9b530 | 2015-06-05 15:28:55 -0700 | [diff] [blame] | 155 | ioctl_macros \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 156 | *.te \ |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 157 | roles_decl \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 158 | roles \ |
| 159 | users \ |
| 160 | initial_sid_contexts \ |
| 161 | fs_use \ |
| 162 | genfs_contexts \ |
| 163 | port_contexts |
| 164 | |
Alex Klyubin | 7cda44f | 2017-03-21 14:28:53 -0700 | [diff] [blame] | 165 | # CIL files which contain workarounds for current limitation of human-readable |
| 166 | # module policy language. These files are appended to the CIL files produced |
| 167 | # from module language files. |
| 168 | sepolicy_build_cil_workaround_files := technical_debt.cil |
| 169 | |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 170 | my_target_arch := $(TARGET_ARCH) |
| 171 | ifneq (,$(filter mips mips64,$(TARGET_ARCH))) |
| 172 | my_target_arch := mips |
| 173 | endif |
| 174 | |
Jeff Vander Stoep | d2053bd | 2017-03-15 13:37:35 -0700 | [diff] [blame] | 175 | intermediates := $(TARGET_OUT_INTERMEDIATES)/ETC/sepolicy_intermediates |
| 176 | |
Jeff Vander Stoep | 7443484 | 2017-03-13 12:22:15 -0700 | [diff] [blame] | 177 | with_asan := false |
| 178 | ifneq (,$(filter address,$(SANITIZE_TARGET))) |
| 179 | with_asan := true |
| 180 | endif |
| 181 | |
Jeff Vander Stoep | 3ca843a | 2017-10-04 09:42:29 -0700 | [diff] [blame] | 182 | # Library extension for host-side tests |
Jeff Vander Stoep | e06e4c1 | 2017-10-04 18:15:44 -0700 | [diff] [blame] | 183 | ifeq ($(HOST_OS),darwin) |
Jeff Vander Stoep | 3ca843a | 2017-10-04 09:42:29 -0700 | [diff] [blame] | 184 | SHAREDLIB_EXT=dylib |
| 185 | else |
| 186 | SHAREDLIB_EXT=so |
| 187 | endif |
| 188 | |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 189 | include $(CLEAR_VARS) |
| 190 | LOCAL_MODULE := selinux_policy |
| 191 | LOCAL_MODULE_TAGS := optional |
| 192 | # Include SELinux policy. We do this here because different modules |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 193 | # need to be included based on the value of PRODUCT_SEPOLICY_SPLIT. This |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 194 | # type of conditional inclusion cannot be done in top-level files such |
| 195 | # as build/target/product/embedded.mk. |
| 196 | # This conditional inclusion closely mimics the conditional logic |
| 197 | # inside init/init.cpp for loading SELinux policy from files. |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 198 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 199 | |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 200 | # Use split SELinux policy |
| 201 | LOCAL_REQUIRED_MODULES += \ |
| 202 | $(platform_mapping_file) \ |
Yifan Hong | 617e853 | 2018-02-07 11:13:57 -0800 | [diff] [blame] | 203 | $(addsuffix .cil,$(PLATFORM_SEPOLICY_COMPAT_VERSIONS)) \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 204 | plat_pub_versioned.cil \ |
| 205 | vendor_sepolicy.cil \ |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 206 | plat_sepolicy.cil \ |
| 207 | plat_and_mapping_sepolicy.cil.sha256 \ |
| 208 | secilc \ |
Jeff Vander Stoep | 1fc0682 | 2017-05-31 15:36:07 -0700 | [diff] [blame] | 209 | plat_sepolicy_vers.txt \ |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 210 | |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 211 | # Include precompiled policy, unless told otherwise |
| 212 | ifneq ($(PRODUCT_PRECOMPILED_SEPOLICY),false) |
| 213 | LOCAL_REQUIRED_MODULES += precompiled_sepolicy precompiled_sepolicy.plat_and_mapping.sha256 |
| 214 | endif |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 215 | else |
Bowgo Tsai | 741a70a | 2018-02-05 17:41:02 +0800 | [diff] [blame] | 216 | # The following files are only allowed for non-Treble devices. |
| 217 | LOCAL_REQUIRED_MODULES += \ |
| 218 | sepolicy \ |
| 219 | vendor_service_contexts |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 220 | endif |
Jeff Vander Stoep | 7a68c5a | 2017-06-08 13:24:15 -0700 | [diff] [blame] | 221 | |
| 222 | LOCAL_REQUIRED_MODULES += \ |
Bowgo Tsai | 741a70a | 2018-02-05 17:41:02 +0800 | [diff] [blame] | 223 | build_sepolicy \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 224 | vendor_file_contexts \ |
| 225 | vendor_mac_permissions.xml \ |
| 226 | vendor_property_contexts \ |
| 227 | vendor_seapp_contexts \ |
| 228 | vendor_hwservice_contexts \ |
Jeff Vander Stoep | 13fb5ed | 2017-08-22 13:29:53 -0700 | [diff] [blame] | 229 | plat_file_contexts \ |
| 230 | plat_mac_permissions.xml \ |
| 231 | plat_property_contexts \ |
| 232 | plat_seapp_contexts \ |
| 233 | plat_service_contexts \ |
| 234 | plat_hwservice_contexts \ |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 235 | searchpolicy \ |
Jeff Vander Stoep | 13fb5ed | 2017-08-22 13:29:53 -0700 | [diff] [blame] | 236 | vndservice_contexts \ |
Jeff Vander Stoep | 7a68c5a | 2017-06-08 13:24:15 -0700 | [diff] [blame] | 237 | |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 238 | ifneq ($(TARGET_BUILD_VARIANT), user) |
| 239 | LOCAL_REQUIRED_MODULES += \ |
| 240 | selinux_denial_metadata \ |
| 241 | |
| 242 | endif |
| 243 | |
| 244 | ifneq ($(with_asan),true) |
Jeff Vander Stoep | 3d4965b | 2018-02-13 20:29:55 -0800 | [diff] [blame] | 245 | ifneq ($(SELINUX_IGNORE_NEVERALLOWS),true) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 246 | LOCAL_REQUIRED_MODULES += \ |
| 247 | sepolicy_tests \ |
Tri Vo | 1406926 | 2018-01-31 16:22:35 -0800 | [diff] [blame] | 248 | treble_sepolicy_tests_26.0 \ |
Tri Vo | 9299d93 | 2018-01-31 16:50:28 -0800 | [diff] [blame] | 249 | treble_sepolicy_tests_27.0 \ |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 250 | |
| 251 | endif |
Jeff Vander Stoep | 3d4965b | 2018-02-13 20:29:55 -0800 | [diff] [blame] | 252 | endif |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 253 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 254 | ifdef BOARD_ODM_SEPOLICY_DIRS |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 255 | LOCAL_REQUIRED_MODULES += \ |
| 256 | odm_sepolicy.cil \ |
Bowgo Tsai | ecf656b | 2017-11-29 16:15:28 +0800 | [diff] [blame] | 257 | odm_file_contexts \ |
Bowgo Tsai | 1f717b1 | 2017-11-29 16:15:55 +0800 | [diff] [blame^] | 258 | odm_seapp_contexts \ |
| 259 | odm_property_contexts |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 260 | endif |
| 261 | |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 262 | include $(BUILD_PHONY_PACKAGE) |
| 263 | |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 264 | ################################# |
| 265 | include $(CLEAR_VARS) |
| 266 | |
| 267 | LOCAL_MODULE := sepolicy_neverallows |
| 268 | LOCAL_MODULE_CLASS := ETC |
| 269 | LOCAL_MODULE_TAGS := optional |
| 270 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 271 | |
| 272 | include $(BUILD_SYSTEM)/base_rules.mk |
| 273 | |
| 274 | # sepolicy_policy.conf - All of the policy for the device. This is only used to |
| 275 | # check neverallow rules. |
| 276 | sepolicy_policy.conf := $(intermediates)/policy.conf |
| 277 | $(sepolicy_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 278 | $(sepolicy_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 279 | $(sepolicy_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := user |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 280 | $(sepolicy_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
| 281 | $(sepolicy_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
| 282 | $(sepolicy_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 283 | $(sepolicy_policy.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
| 284 | $(sepolicy_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
| 285 | $(PLAT_PUBLIC_POLICY) $(PLAT_PRIVATE_POLICY) $(PLAT_VENDOR_POLICY) $(BOARD_SEPOLICY_DIRS)) |
| 286 | $(transform-policy-to-conf) |
| 287 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 288 | |
| 289 | $(LOCAL_BUILT_MODULE): $(sepolicy_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy |
| 290 | rm -f $@ |
| 291 | ifneq ($(SELINUX_IGNORE_NEVERALLOWS),true) |
| 292 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c \ |
| 293 | $(POLICYVERS) -o $@ $< |
| 294 | else # ($(SELINUX_IGNORE_NEVERALLOWS),true) |
| 295 | $(hide) touch $@ |
| 296 | endif # ($(SELINUX_IGNORE_NEVERALLOWS),true) |
| 297 | |
| 298 | sepolicy_policy.conf := |
| 299 | built_sepolicy_neverallows := $(LOCAL_BUILT_MODULE) |
| 300 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 301 | ################################## |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 302 | # reqd_policy_mask - a policy.conf file which contains only the bare minimum |
| 303 | # policy necessary to use checkpolicy. This bare-minimum policy needs to be |
| 304 | # present in all policy.conf files, but should not necessarily be exported as |
| 305 | # part of the public policy. The rules generated by reqd_policy_mask will allow |
| 306 | # the compilation of public policy and subsequent removal of CIL policy that |
| 307 | # should not be exported. |
| 308 | |
| 309 | reqd_policy_mask.conf := $(intermediates)/reqd_policy_mask.conf |
| 310 | $(reqd_policy_mask.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 311 | $(reqd_policy_mask.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 312 | $(reqd_policy_mask.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 313 | $(reqd_policy_mask.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
Jeff Vander Stoep | 7443484 | 2017-03-13 12:22:15 -0700 | [diff] [blame] | 314 | $(reqd_policy_mask.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 315 | $(reqd_policy_mask.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 316 | $(reqd_policy_mask.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
Jaekyun Seok | e497145 | 2017-10-19 16:54:49 +0900 | [diff] [blame] | 317 | $(reqd_policy_mask.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 318 | $(reqd_policy_mask.conf): $(call build_policy, $(sepolicy_build_files), $(REQD_MASK_POLICY)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 319 | $(transform-policy-to-conf) |
Andreas Gampe | 3ddc78b | 2017-04-27 17:16:13 -0700 | [diff] [blame] | 320 | # b/37755687 |
| 321 | CHECKPOLICY_ASAN_OPTIONS := ASAN_OPTIONS=detect_leaks=0 |
| 322 | |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 323 | reqd_policy_mask.cil := $(intermediates)/reqd_policy_mask.cil |
| 324 | $(reqd_policy_mask.cil): $(reqd_policy_mask.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy |
| 325 | @mkdir -p $(dir $@) |
Andreas Gampe | 3ddc78b | 2017-04-27 17:16:13 -0700 | [diff] [blame] | 326 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $(HOST_OUT_EXECUTABLES)/checkpolicy -C -M -c \ |
| 327 | $(POLICYVERS) -o $@ $< |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 328 | |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 329 | reqd_policy_mask.conf := |
| 330 | |
| 331 | ################################## |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 332 | # plat_pub_policy - policy that will be exported to be a part of non-platform |
| 333 | # policy corresponding to this platform version. This is a limited subset of |
| 334 | # policy that would not compile in checkpolicy on its own. To get around this |
| 335 | # limitation, add only the required files from private policy, which will |
| 336 | # generate CIL policy that will then be filtered out by the reqd_policy_mask. |
| 337 | plat_pub_policy.conf := $(intermediates)/plat_pub_policy.conf |
| 338 | $(plat_pub_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 339 | $(plat_pub_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 340 | $(plat_pub_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 341 | $(plat_pub_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
Jeff Vander Stoep | 7443484 | 2017-03-13 12:22:15 -0700 | [diff] [blame] | 342 | $(plat_pub_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 343 | $(plat_pub_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 344 | $(plat_pub_policy.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
Jaekyun Seok | e497145 | 2017-10-19 16:54:49 +0900 | [diff] [blame] | 345 | $(plat_pub_policy.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 346 | $(plat_pub_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
Dan Cashman | 6bf50e5 | 2017-04-12 11:12:17 -0700 | [diff] [blame] | 347 | $(PLAT_PUBLIC_POLICY) $(REQD_MASK_POLICY)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 348 | $(transform-policy-to-conf) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 349 | plat_pub_policy.cil := $(intermediates)/plat_pub_policy.cil |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 350 | $(plat_pub_policy.cil): PRIVATE_POL_CONF := $(plat_pub_policy.conf) |
| 351 | $(plat_pub_policy.cil): PRIVATE_REQD_MASK := $(reqd_policy_mask.cil) |
| 352 | $(plat_pub_policy.cil): $(HOST_OUT_EXECUTABLES)/checkpolicy $(plat_pub_policy.conf) $(reqd_policy_mask.cil) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 353 | @mkdir -p $(dir $@) |
Andreas Gampe | 3ddc78b | 2017-04-27 17:16:13 -0700 | [diff] [blame] | 354 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $< -C -M -c $(POLICYVERS) -o $@.tmp $(PRIVATE_POL_CONF) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 355 | $(hide) grep -Fxv -f $(PRIVATE_REQD_MASK) $@.tmp > $@ |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 356 | |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 357 | plat_pub_policy.conf := |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 358 | |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 359 | ################################## |
| 360 | include $(CLEAR_VARS) |
| 361 | |
| 362 | LOCAL_MODULE := sectxfile_nl |
| 363 | LOCAL_MODULE_CLASS := ETC |
| 364 | LOCAL_MODULE_TAGS := optional |
| 365 | |
| 366 | # Create a file containing newline only to add between context config files |
| 367 | include $(BUILD_SYSTEM)/base_rules.mk |
| 368 | $(LOCAL_BUILT_MODULE): |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 369 | @mkdir -p $(dir $@) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 370 | $(hide) echo > $@ |
| 371 | |
| 372 | built_nl := $(LOCAL_BUILT_MODULE) |
| 373 | |
| 374 | ################################# |
| 375 | include $(CLEAR_VARS) |
| 376 | |
| 377 | LOCAL_MODULE := plat_sepolicy.cil |
| 378 | LOCAL_MODULE_CLASS := ETC |
| 379 | LOCAL_MODULE_TAGS := optional |
Alex Klyubin | 052b0bb | 2017-03-02 12:39:25 -0800 | [diff] [blame] | 380 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 381 | |
| 382 | include $(BUILD_SYSTEM)/base_rules.mk |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 383 | |
| 384 | # plat_policy.conf - A combination of the private and public platform policy |
| 385 | # which will ship with the device. The platform will always reflect the most |
| 386 | # recent platform version and is not currently being attributized. |
| 387 | plat_policy.conf := $(intermediates)/plat_policy.conf |
| 388 | $(plat_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 389 | $(plat_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 390 | $(plat_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 391 | $(plat_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
Jeff Vander Stoep | 7443484 | 2017-03-13 12:22:15 -0700 | [diff] [blame] | 392 | $(plat_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 393 | $(plat_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 394 | $(plat_policy.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
Jaekyun Seok | e497145 | 2017-10-19 16:54:49 +0900 | [diff] [blame] | 395 | $(plat_policy.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 396 | $(plat_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 397 | $(PLAT_PUBLIC_POLICY) $(PLAT_PRIVATE_POLICY)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 398 | $(transform-policy-to-conf) |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 399 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 400 | |
Jeff Vander Stoep | b878769 | 2017-04-21 15:57:07 -0700 | [diff] [blame] | 401 | $(LOCAL_BUILT_MODULE): PRIVATE_ADDITIONAL_CIL_FILES := \ |
Alex Klyubin | 7cda44f | 2017-03-21 14:28:53 -0700 | [diff] [blame] | 402 | $(call build_policy, $(sepolicy_build_cil_workaround_files), $(PLAT_PRIVATE_POLICY)) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 403 | $(LOCAL_BUILT_MODULE): PRIVATE_NEVERALLOW_ARG := $(NEVERALLOW_ARG) |
Jeff Vander Stoep | b878769 | 2017-04-21 15:57:07 -0700 | [diff] [blame] | 404 | $(LOCAL_BUILT_MODULE): $(plat_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy \ |
| 405 | $(HOST_OUT_EXECUTABLES)/secilc \ |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 406 | $(call build_policy, $(sepolicy_build_cil_workaround_files), $(PLAT_PRIVATE_POLICY)) \ |
| 407 | $(built_sepolicy_neverallows) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 408 | @mkdir -p $(dir $@) |
Andreas Gampe | 3ddc78b | 2017-04-27 17:16:13 -0700 | [diff] [blame] | 409 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -C -c \ |
| 410 | $(POLICYVERS) -o $@ $< |
Alex Klyubin | 7cda44f | 2017-03-21 14:28:53 -0700 | [diff] [blame] | 411 | $(hide) cat $(PRIVATE_ADDITIONAL_CIL_FILES) >> $@ |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 412 | $(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -c $(POLICYVERS) $(PRIVATE_NEVERALLOW_ARG) $@ -o /dev/null -f /dev/null |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 413 | |
Alex Klyubin | 8f7173b | 2017-02-25 14:47:53 -0800 | [diff] [blame] | 414 | built_plat_cil := $(LOCAL_BUILT_MODULE) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 415 | plat_policy.conf := |
| 416 | |
| 417 | ################################# |
| 418 | include $(CLEAR_VARS) |
| 419 | |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 420 | LOCAL_MODULE := plat_sepolicy_vers.txt |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 421 | LOCAL_MODULE_CLASS := ETC |
| 422 | LOCAL_MODULE_TAGS := optional |
Dan Cashman | 4f9a648 | 2017-04-10 12:27:18 -0700 | [diff] [blame] | 423 | LOCAL_PROPRIETARY_MODULE := true |
| 424 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 425 | |
| 426 | include $(BUILD_SYSTEM)/base_rules.mk |
| 427 | |
| 428 | $(LOCAL_BUILT_MODULE) : PRIVATE_PLAT_SEPOL_VERS := $(BOARD_SEPOLICY_VERS) |
| 429 | $(LOCAL_BUILT_MODULE) : |
| 430 | mkdir -p $(dir $@) |
| 431 | echo $(PRIVATE_PLAT_SEPOL_VERS) > $@ |
| 432 | |
| 433 | ################################# |
| 434 | include $(CLEAR_VARS) |
| 435 | |
| 436 | LOCAL_MODULE := $(platform_mapping_file) |
| 437 | LOCAL_MODULE_CLASS := ETC |
| 438 | LOCAL_MODULE_TAGS := optional |
| 439 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux/mapping |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 440 | |
| 441 | include $(BUILD_SYSTEM)/base_rules.mk |
| 442 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 443 | current_mapping.cil := $(intermediates)/mapping/$(PLATFORM_SEPOLICY_VERSION).cil |
| 444 | ifeq ($(BOARD_SEPOLICY_VERS), $(PLATFORM_SEPOLICY_VERSION)) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 445 | # auto-generate the mapping file for current platform policy, since it needs to |
| 446 | # track platform policy development |
Dan Cashman | 6f14f6b | 2017-04-07 16:36:23 -0700 | [diff] [blame] | 447 | $(current_mapping.cil) : PRIVATE_VERS := $(PLATFORM_SEPOLICY_VERSION) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 448 | $(current_mapping.cil) : $(plat_pub_policy.cil) $(HOST_OUT_EXECUTABLES)/version_policy |
| 449 | @mkdir -p $(dir $@) |
| 450 | $(hide) $(HOST_OUT_EXECUTABLES)/version_policy -b $< -m -n $(PRIVATE_VERS) -o $@ |
| 451 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 452 | else # ifeq ($(BOARD_SEPOLICY_VERS), $(PLATFORM_SEPOLICY_VERSION)) |
| 453 | prebuilt_mapping_files := $(wildcard $(addsuffix /mapping/$(BOARD_SEPOLICY_VERS).cil, $(PLAT_PRIVATE_POLICY))) |
| 454 | $(current_mapping.cil) : $(prebuilt_mapping_files) |
| 455 | @mkdir -p $(dir $@) |
| 456 | cat $^ > $@ |
Sandeep Patil | 42f9598 | 2017-04-07 14:18:48 -0700 | [diff] [blame] | 457 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 458 | prebuilt_mapping_files := |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 459 | endif |
| 460 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 461 | $(LOCAL_BUILT_MODULE): $(current_mapping.cil) $(ACP) |
Jeff Vander Stoep | b878769 | 2017-04-21 15:57:07 -0700 | [diff] [blame] | 462 | $(hide) $(ACP) $< $@ |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 463 | |
Alex Klyubin | 8f7173b | 2017-02-25 14:47:53 -0800 | [diff] [blame] | 464 | built_mapping_cil := $(LOCAL_BUILT_MODULE) |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 465 | current_mapping.cil := |
| 466 | |
| 467 | ################################# |
| 468 | include $(CLEAR_VARS) |
| 469 | |
Tri Vo | fb55808 | 2018-01-31 18:07:24 -0800 | [diff] [blame] | 470 | LOCAL_MODULE := 27.0.cil |
| 471 | LOCAL_SRC_FILES := private/compat/27.0/27.0.cil |
| 472 | LOCAL_MODULE_CLASS := ETC |
| 473 | LOCAL_MODULE_TAGS := optional |
| 474 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux/mapping |
| 475 | |
| 476 | include $(BUILD_PREBUILT) |
| 477 | ################################# |
| 478 | include $(CLEAR_VARS) |
| 479 | |
Dan Cashman | c96721e | 2017-09-28 15:06:39 -0700 | [diff] [blame] | 480 | LOCAL_MODULE := 26.0.cil |
| 481 | LOCAL_SRC_FILES := private/compat/26.0/26.0.cil |
| 482 | LOCAL_MODULE_CLASS := ETC |
| 483 | LOCAL_MODULE_TAGS := optional |
| 484 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux/mapping |
| 485 | |
| 486 | include $(BUILD_PREBUILT) |
| 487 | ################################# |
| 488 | include $(CLEAR_VARS) |
| 489 | |
Dan Cashman | 0e9c47c | 2017-04-04 14:27:41 -0700 | [diff] [blame] | 490 | LOCAL_MODULE := plat_and_mapping_sepolicy.cil.sha256 |
| 491 | LOCAL_MODULE_CLASS := ETC |
| 492 | LOCAL_MODULE_TAGS := optional |
| 493 | LOCAL_MODULE_PATH = $(TARGET_OUT)/etc/selinux |
| 494 | |
| 495 | include $(BUILD_SYSTEM)/base_rules.mk |
| 496 | |
| 497 | $(LOCAL_BUILT_MODULE): $(built_plat_cil) $(built_mapping_cil) |
| 498 | cat $^ | sha256sum | cut -d' ' -f1 > $@ |
| 499 | |
| 500 | ################################# |
| 501 | include $(CLEAR_VARS) |
| 502 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 503 | # plat_pub_versioned.cil - the exported platform policy associated with the version |
| 504 | # that non-platform policy targets. |
| 505 | LOCAL_MODULE := plat_pub_versioned.cil |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 506 | LOCAL_MODULE_CLASS := ETC |
| 507 | LOCAL_MODULE_TAGS := optional |
Alex Klyubin | 052b0bb | 2017-03-02 12:39:25 -0800 | [diff] [blame] | 508 | LOCAL_PROPRIETARY_MODULE := true |
| 509 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 510 | |
| 511 | include $(BUILD_SYSTEM)/base_rules.mk |
| 512 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 513 | $(LOCAL_BUILT_MODULE) : PRIVATE_VERS := $(BOARD_SEPOLICY_VERS) |
| 514 | $(LOCAL_BUILT_MODULE) : PRIVATE_TGT_POL := $(plat_pub_policy.cil) |
| 515 | $(LOCAL_BUILT_MODULE) : PRIVATE_DEP_CIL_FILES := $(built_plat_cil) $(built_mapping_cil) |
| 516 | $(LOCAL_BUILT_MODULE) : $(plat_pub_policy.cil) $(HOST_OUT_EXECUTABLES)/version_policy \ |
| 517 | $(HOST_OUT_EXECUTABLES)/secilc $(built_plat_cil) $(built_mapping_cil) |
| 518 | @mkdir -p $(dir $@) |
| 519 | $(HOST_OUT_EXECUTABLES)/version_policy -b $< -t $(PRIVATE_TGT_POL) -n $(PRIVATE_VERS) -o $@ |
| 520 | $(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -N -c $(POLICYVERS) \ |
| 521 | $(PRIVATE_DEP_CIL_FILES) $@ -o /dev/null -f /dev/null |
| 522 | |
| 523 | built_plat_pub_vers_cil := $(LOCAL_BUILT_MODULE) |
| 524 | |
| 525 | ################################# |
| 526 | include $(CLEAR_VARS) |
| 527 | |
| 528 | # vendor_policy.cil - the vendor sepolicy. This needs attributization and to be combined |
| 529 | # with the platform-provided policy. It makes use of the reqd_policy_mask files from private |
| 530 | # policy and the platform public policy files in order to use checkpolicy. |
| 531 | LOCAL_MODULE := vendor_sepolicy.cil |
| 532 | LOCAL_MODULE_CLASS := ETC |
| 533 | LOCAL_MODULE_TAGS := optional |
| 534 | LOCAL_PROPRIETARY_MODULE := true |
| 535 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 536 | |
| 537 | include $(BUILD_SYSTEM)/base_rules.mk |
| 538 | |
| 539 | vendor_policy.conf := $(intermediates)/vendor_policy.conf |
| 540 | $(vendor_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 541 | $(vendor_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 542 | $(vendor_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 543 | $(vendor_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
| 544 | $(vendor_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
| 545 | $(vendor_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 546 | $(vendor_policy.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
| 547 | $(vendor_policy.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
| 548 | $(vendor_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
| 549 | $(PLAT_PUBLIC_POLICY) $(REQD_MASK_POLICY) $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 550 | $(transform-policy-to-conf) |
Robert Craig | 65d4f44 | 2013-03-27 06:30:25 -0400 | [diff] [blame] | 551 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 552 | |
Bowgo Tsai | 741a70a | 2018-02-05 17:41:02 +0800 | [diff] [blame] | 553 | $(LOCAL_BUILT_MODULE): PRIVATE_POL_CONF := $(vendor_policy.conf) |
| 554 | $(LOCAL_BUILT_MODULE): PRIVATE_REQD_MASK := $(reqd_policy_mask.cil) |
| 555 | $(LOCAL_BUILT_MODULE): PRIVATE_BASE_CIL := $(plat_pub_policy.cil) |
| 556 | $(LOCAL_BUILT_MODULE): PRIVATE_VERS := $(BOARD_SEPOLICY_VERS) |
| 557 | $(LOCAL_BUILT_MODULE): PRIVATE_DEP_CIL_FILES := $(built_plat_cil) $(built_plat_pub_vers_cil) $(built_mapping_cil) |
| 558 | $(LOCAL_BUILT_MODULE): PRIVATE_FILTER_CIL := $(built_plat_pub_vers_cil) |
| 559 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/build_sepolicy \ |
| 560 | $(vendor_policy.conf) $(reqd_policy_mask.cil) $(plat_pub_policy.cil) \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 561 | $(built_plat_cil) $(built_plat_pub_vers_cil) $(built_mapping_cil) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 562 | @mkdir -p $(dir $@) |
Bowgo Tsai | 741a70a | 2018-02-05 17:41:02 +0800 | [diff] [blame] | 563 | $(hide) $(HOST_OUT_EXECUTABLES)/build_sepolicy -a $(HOST_OUT_EXECUTABLES) build_cil \ |
| 564 | -i $(PRIVATE_POL_CONF) -m $(PRIVATE_REQD_MASK) -c $(CHECKPOLICY_ASAN_OPTIONS) \ |
| 565 | -b $(PRIVATE_BASE_CIL) -d $(PRIVATE_DEP_CIL_FILES) -f $(PRIVATE_FILTER_CIL) \ |
| 566 | -t $(PRIVATE_VERS) -p $(POLICYVERS) -o $@ |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 567 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 568 | built_vendor_cil := $(LOCAL_BUILT_MODULE) |
| 569 | vendor_policy.conf := |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 570 | |
| 571 | ################################# |
| 572 | include $(CLEAR_VARS) |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 573 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 574 | # odm_policy.cil - the odm sepolicy. This needs attributization and to be combined |
| 575 | # with the platform-provided policy. It makes use of the reqd_policy_mask files from private |
| 576 | # policy and the platform public policy files in order to use checkpolicy. |
| 577 | LOCAL_MODULE := odm_sepolicy.cil |
| 578 | LOCAL_MODULE_CLASS := ETC |
| 579 | LOCAL_MODULE_TAGS := optional |
| 580 | LOCAL_PROPRIETARY_MODULE := true |
| 581 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 582 | |
| 583 | include $(BUILD_SYSTEM)/base_rules.mk |
| 584 | |
| 585 | odm_policy.conf := $(intermediates)/odm_policy.conf |
| 586 | $(odm_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 587 | $(odm_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
| 588 | $(odm_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
| 589 | $(odm_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
| 590 | $(odm_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
| 591 | $(odm_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 592 | $(odm_policy.conf): PRIVATE_SEPOLICY_SPLIT := $(PRODUCT_SEPOLICY_SPLIT) |
| 593 | $(odm_policy.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
| 594 | $(odm_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
| 595 | $(PLAT_PUBLIC_POLICY) $(REQD_MASK_POLICY) $(PLAT_VENDOR_POLICY) \ |
| 596 | $(BOARD_VENDOR_SEPOLICY_DIRS) $(BOARD_ODM_SEPOLICY_DIRS)) |
| 597 | $(transform-policy-to-conf) |
| 598 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 599 | |
| 600 | $(LOCAL_BUILT_MODULE): PRIVATE_POL_CONF := $(odm_policy.conf) |
| 601 | $(LOCAL_BUILT_MODULE): PRIVATE_REQD_MASK := $(reqd_policy_mask.cil) |
| 602 | $(LOCAL_BUILT_MODULE): PRIVATE_BASE_CIL := $(plat_pub_policy.cil) |
| 603 | $(LOCAL_BUILT_MODULE): PRIVATE_VERS := $(BOARD_SEPOLICY_VERS) |
| 604 | $(LOCAL_BUILT_MODULE): PRIVATE_DEP_CIL_FILES := $(built_plat_cil) $(built_plat_pub_vers_cil) \ |
| 605 | $(built_mapping_cil) $(built_vendor_cil) |
| 606 | $(LOCAL_BUILT_MODULE) : PRIVATE_FILTER_CIL_FILES := $(built_plat_pub_vers_cil) $(built_vendor_cil) |
| 607 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/build_sepolicy \ |
| 608 | $(odm_policy.conf) $(reqd_policy_mask.cil) $(plat_pub_policy.cil) \ |
| 609 | $(built_plat_cil) $(built_plat_pub_vers_cil) $(built_mapping_cil) $(built_vendor_cil) |
| 610 | @mkdir -p $(dir $@) |
| 611 | $(hide) $(HOST_OUT_EXECUTABLES)/build_sepolicy -a $(HOST_OUT_EXECUTABLES) build_cil \ |
| 612 | -i $(PRIVATE_POL_CONF) -m $(PRIVATE_REQD_MASK) -c $(CHECKPOLICY_ASAN_OPTIONS) \ |
| 613 | -b $(PRIVATE_BASE_CIL) -d $(PRIVATE_DEP_CIL_FILES) -f $(PRIVATE_FILTER_CIL_FILES) \ |
| 614 | -t $(PRIVATE_VERS) -p $(POLICYVERS) -o $@ |
| 615 | |
| 616 | built_odm_cil := $(LOCAL_BUILT_MODULE) |
| 617 | odm_policy.conf := |
| 618 | odm_policy_raw := |
| 619 | |
| 620 | ################################# |
| 621 | include $(CLEAR_VARS) |
| 622 | |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 623 | LOCAL_MODULE := precompiled_sepolicy |
| 624 | LOCAL_MODULE_CLASS := ETC |
| 625 | LOCAL_MODULE_TAGS := optional |
| 626 | LOCAL_PROPRIETARY_MODULE := true |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 627 | |
| 628 | ifeq ($(BOARD_USES_ODMIMAGE),true) |
| 629 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 630 | else |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 631 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 632 | endif |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 633 | |
| 634 | include $(BUILD_SYSTEM)/base_rules.mk |
| 635 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 636 | all_cil_files := \ |
| 637 | $(built_plat_cil) \ |
| 638 | $(built_mapping_cil) \ |
| 639 | $(built_plat_pub_vers_cil) \ |
| 640 | $(built_vendor_cil) |
| 641 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 642 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 643 | all_cil_files += $(built_odm_cil) |
| 644 | endif |
| 645 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 646 | $(LOCAL_BUILT_MODULE): PRIVATE_CIL_FILES := $(all_cil_files) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 647 | $(LOCAL_BUILT_MODULE): PRIVATE_NEVERALLOW_ARG := $(NEVERALLOW_ARG) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 648 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/secilc $(all_cil_files) $(built_sepolicy_neverallows) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 649 | $(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -c $(POLICYVERS) $(PRIVATE_NEVERALLOW_ARG) \ |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 650 | $(PRIVATE_CIL_FILES) -o $@ -f /dev/null |
| 651 | |
| 652 | built_precompiled_sepolicy := $(LOCAL_BUILT_MODULE) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 653 | all_cil_files := |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 654 | |
| 655 | ################################# |
Dan Cashman | 0e9c47c | 2017-04-04 14:27:41 -0700 | [diff] [blame] | 656 | # SHA-256 digest of the plat_sepolicy.cil and mapping_sepolicy.cil files against |
| 657 | # which precompiled_policy was built. |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 658 | ################################# |
| 659 | include $(CLEAR_VARS) |
Dan Cashman | 0e9c47c | 2017-04-04 14:27:41 -0700 | [diff] [blame] | 660 | LOCAL_MODULE := precompiled_sepolicy.plat_and_mapping.sha256 |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 661 | LOCAL_MODULE_CLASS := ETC |
| 662 | LOCAL_MODULE_TAGS := optional |
| 663 | LOCAL_PROPRIETARY_MODULE := true |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 664 | |
| 665 | ifeq ($(BOARD_USES_ODMIMAGE),true) |
| 666 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 667 | else |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 668 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 669 | endif |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 670 | |
| 671 | include $(BUILD_SYSTEM)/base_rules.mk |
| 672 | |
Dan Cashman | 0e9c47c | 2017-04-04 14:27:41 -0700 | [diff] [blame] | 673 | $(LOCAL_BUILT_MODULE): PRIVATE_CIL_FILES := $(built_plat_cil) $(built_mapping_cil) |
| 674 | $(LOCAL_BUILT_MODULE): $(built_precompiled_sepolicy) $(built_plat_cil) $(built_mapping_cil) |
| 675 | cat $(PRIVATE_CIL_FILES) | sha256sum | cut -d' ' -f1 > $@ |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 676 | |
| 677 | ################################# |
| 678 | include $(CLEAR_VARS) |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 679 | # build this target so that we can still perform neverallow checks |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 680 | |
| 681 | LOCAL_MODULE := sepolicy |
| 682 | LOCAL_MODULE_CLASS := ETC |
| 683 | LOCAL_MODULE_TAGS := optional |
Daniel Cashman | 65d0134 | 2016-12-17 00:53:26 +0000 | [diff] [blame] | 684 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 685 | |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 686 | include $(BUILD_SYSTEM)/base_rules.mk |
| 687 | |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 688 | all_cil_files := \ |
Jeff Vander Stoep | b878769 | 2017-04-21 15:57:07 -0700 | [diff] [blame] | 689 | $(built_plat_cil) \ |
| 690 | $(built_mapping_cil) \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 691 | $(built_plat_pub_vers_cil) \ |
| 692 | $(built_vendor_cil) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 693 | |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 694 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 695 | all_cil_files += $(built_odm_cil) |
| 696 | endif |
| 697 | |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 698 | $(LOCAL_BUILT_MODULE): PRIVATE_CIL_FILES := $(all_cil_files) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 699 | $(LOCAL_BUILT_MODULE): PRIVATE_NEVERALLOW_ARG := $(NEVERALLOW_ARG) |
| 700 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/secilc $(HOST_OUT_EXECUTABLES)/sepolicy-analyze $(all_cil_files) \ |
| 701 | $(built_sepolicy_neverallows) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 702 | @mkdir -p $(dir $@) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 703 | $(hide) $< -m -M true -G -c $(POLICYVERS) $(PRIVATE_NEVERALLOW_ARG) $(PRIVATE_CIL_FILES) -o $@.tmp -f /dev/null |
Nick Kralevich | bca98ef | 2016-02-26 20:06:52 -0800 | [diff] [blame] | 704 | $(hide) $(HOST_OUT_EXECUTABLES)/sepolicy-analyze $@.tmp permissive > $@.permissivedomains |
| 705 | $(hide) if [ "$(TARGET_BUILD_VARIANT)" = "user" -a -s $@.permissivedomains ]; then \ |
| 706 | echo "==========" 1>&2; \ |
| 707 | echo "ERROR: permissive domains not allowed in user builds" 1>&2; \ |
| 708 | echo "List of invalid domains:" 1>&2; \ |
| 709 | cat $@.permissivedomains 1>&2; \ |
| 710 | exit 1; \ |
| 711 | fi |
| 712 | $(hide) mv $@.tmp $@ |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 713 | |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 714 | built_sepolicy := $(LOCAL_BUILT_MODULE) |
dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 715 | all_cil_files := |
Stephen Smalley | 01a58af | 2012-10-02 12:46:37 -0400 | [diff] [blame] | 716 | |
Alex Klyubin | 84aa742 | 2017-03-10 09:36:07 -0800 | [diff] [blame] | 717 | ################################# |
| 718 | include $(CLEAR_VARS) |
| 719 | |
| 720 | # keep concrete sepolicy for neverallow checks |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 721 | # If SELINUX_IGNORE_NEVERALLOWS is set, we use sed to remove the neverallow lines before compiling. |
Alex Klyubin | 84aa742 | 2017-03-10 09:36:07 -0800 | [diff] [blame] | 722 | |
| 723 | LOCAL_MODULE := sepolicy.recovery |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 724 | LOCAL_MODULE_STEM := sepolicy |
Alex Klyubin | 84aa742 | 2017-03-10 09:36:07 -0800 | [diff] [blame] | 725 | LOCAL_MODULE_CLASS := ETC |
| 726 | LOCAL_MODULE_TAGS := optional |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 727 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
Alex Klyubin | 84aa742 | 2017-03-10 09:36:07 -0800 | [diff] [blame] | 728 | |
| 729 | include $(BUILD_SYSTEM)/base_rules.mk |
| 730 | |
Dan Cashman | c8d4535 | 2017-04-11 07:38:48 -0700 | [diff] [blame] | 731 | sepolicy.recovery.conf := $(intermediates)/sepolicy.recovery.conf |
| 732 | $(sepolicy.recovery.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 733 | $(sepolicy.recovery.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 734 | $(sepolicy.recovery.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Dan Cashman | c8d4535 | 2017-04-11 07:38:48 -0700 | [diff] [blame] | 735 | $(sepolicy.recovery.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
| 736 | $(sepolicy.recovery.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
| 737 | $(sepolicy.recovery.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 738 | $(sepolicy.recovery.conf): PRIVATE_TGT_RECOVERY := -D target_recovery=true |
Dan Cashman | c8d4535 | 2017-04-11 07:38:48 -0700 | [diff] [blame] | 739 | $(sepolicy.recovery.conf): $(call build_policy, $(sepolicy_build_files), \ |
| 740 | $(PLAT_PUBLIC_POLICY) $(PLAT_PRIVATE_POLICY) \ |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 741 | $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) \ |
| 742 | $(BOARD_ODM_SEPOLICY_DIRS)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 743 | $(transform-policy-to-conf) |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 744 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 745 | ifeq ($(SELINUX_IGNORE_NEVERALLOWS),true) |
| 746 | $(hide) sed -z 's/\n\s*neverallow[^;]*;/\n/g' $@ > $@.neverallow |
| 747 | $(hide) mv $@.neverallow $@ |
| 748 | endif |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 749 | |
Dan Cashman | c8d4535 | 2017-04-11 07:38:48 -0700 | [diff] [blame] | 750 | $(LOCAL_BUILT_MODULE): $(sepolicy.recovery.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy \ |
| 751 | $(HOST_OUT_EXECUTABLES)/sepolicy-analyze |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 752 | @mkdir -p $(dir $@) |
Andreas Gampe | 3ddc78b | 2017-04-27 17:16:13 -0700 | [diff] [blame] | 753 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c \ |
| 754 | $(POLICYVERS) -o $@.tmp $< |
Nick Kralevich | bca98ef | 2016-02-26 20:06:52 -0800 | [diff] [blame] | 755 | $(hide) $(HOST_OUT_EXECUTABLES)/sepolicy-analyze $@.tmp permissive > $@.permissivedomains |
| 756 | $(hide) if [ "$(TARGET_BUILD_VARIANT)" = "user" -a -s $@.permissivedomains ]; then \ |
| 757 | echo "==========" 1>&2; \ |
| 758 | echo "ERROR: permissive domains not allowed in user builds" 1>&2; \ |
| 759 | echo "List of invalid domains:" 1>&2; \ |
| 760 | cat $@.permissivedomains 1>&2; \ |
| 761 | exit 1; \ |
| 762 | fi |
| 763 | $(hide) mv $@.tmp $@ |
Stephen Smalley | e60723a | 2014-05-29 16:40:15 -0400 | [diff] [blame] | 764 | |
Dan Cashman | c8d4535 | 2017-04-11 07:38:48 -0700 | [diff] [blame] | 765 | sepolicy.recovery.conf := |
Stephen Smalley | e60723a | 2014-05-29 16:40:15 -0400 | [diff] [blame] | 766 | |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 767 | ################################## |
Alex Klyubin | 446279a | 2017-04-06 14:45:50 -0700 | [diff] [blame] | 768 | # SELinux policy embedded into CTS. |
| 769 | # CTS checks neverallow rules of this policy against the policy of the device under test. |
| 770 | ################################## |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 771 | include $(CLEAR_VARS) |
| 772 | |
| 773 | LOCAL_MODULE := general_sepolicy.conf |
| 774 | LOCAL_MODULE_CLASS := ETC |
| 775 | LOCAL_MODULE_TAGS := tests |
| 776 | |
| 777 | include $(BUILD_SYSTEM)/base_rules.mk |
| 778 | |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 779 | $(LOCAL_BUILT_MODULE): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 780 | $(LOCAL_BUILT_MODULE): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 781 | $(LOCAL_BUILT_MODULE): PRIVATE_TARGET_BUILD_VARIANT := user |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 782 | $(LOCAL_BUILT_MODULE): PRIVATE_TGT_ARCH := $(my_target_arch) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 783 | $(LOCAL_BUILT_MODULE): PRIVATE_WITH_ASAN := false |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 784 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY_SPLIT := cts |
Jaekyun Seok | 64ade65 | 2018-01-30 17:23:58 +0900 | [diff] [blame] | 785 | $(LOCAL_BUILT_MODULE): PRIVATE_COMPATIBLE_PROPERTY := cts |
dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 786 | $(LOCAL_BUILT_MODULE): $(call build_policy, $(sepolicy_build_files), \ |
| 787 | $(PLAT_PUBLIC_POLICY) $(PLAT_PRIVATE_POLICY)) |
Dan Cashman | 36ee91d | 2017-07-07 14:59:51 -0700 | [diff] [blame] | 788 | $(transform-policy-to-conf) |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 789 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 790 | |
William Roberts | b876993 | 2015-06-29 16:31:23 -0700 | [diff] [blame] | 791 | ################################## |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 792 | # TODO - remove this. Keep around until we get the filesystem creation stuff taken care of. |
| 793 | # |
William Roberts | b876993 | 2015-06-29 16:31:23 -0700 | [diff] [blame] | 794 | include $(CLEAR_VARS) |
| 795 | |
Richard Haines | c2d0191 | 2015-08-06 17:43:52 +0100 | [diff] [blame] | 796 | LOCAL_MODULE := file_contexts.bin |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 797 | LOCAL_MODULE_CLASS := ETC |
| 798 | LOCAL_MODULE_TAGS := optional |
| 799 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 800 | |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 801 | include $(BUILD_SYSTEM)/base_rules.mk |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 802 | |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 803 | # The file_contexts.bin is built in the following way: |
| 804 | # 1. Collect all file_contexts files in THIS repository and process them with |
| 805 | # m4 into a tmp file called file_contexts.local.tmp. |
| 806 | # 2. Collect all device specific file_contexts files and process them with m4 |
| 807 | # into a tmp file called file_contexts.device.tmp. |
| 808 | # 3. Run checkfc -e (allow no device fc entries ie empty) and fc_sort on |
| 809 | # file_contexts.device.tmp and output to file_contexts.device.sorted.tmp. |
| 810 | # 4. Concatenate file_contexts.local.tmp and file_contexts.device.tmp into |
| 811 | # file_contexts.concat.tmp. |
| 812 | # 5. Run checkfc and sefcontext_compile on file_contexts.concat.tmp to produce |
| 813 | # file_contexts.bin. |
| 814 | # |
| 815 | # Note: That a newline file is placed between each file_context file found to |
| 816 | # ensure a proper build when an fc file is missing an ending newline. |
William Roberts | 29d1468 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 817 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 818 | local_fc_files := $(call build_policy, file_contexts, $(PLAT_PRIVATE_POLICY)) |
| 819 | |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 820 | ifneq ($(filter address,$(SANITIZE_TARGET)),) |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 821 | local_fc_files := $(local_fc_files) $(wildcard $(addsuffix /file_contexts_asan, $(PLAT_PRIVATE_POLICY))) |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 822 | endif |
| 823 | local_fcfiles_with_nl := $(call add_nl, $(local_fc_files), $(built_nl)) |
| 824 | |
| 825 | file_contexts.local.tmp := $(intermediates)/file_contexts.local.tmp |
| 826 | $(file_contexts.local.tmp): $(local_fcfiles_with_nl) |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 827 | @mkdir -p $(dir $@) |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 828 | $(hide) m4 -s $^ > $@ |
| 829 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 830 | device_fc_files := $(call build_vendor_policy, file_contexts) |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 831 | |
| 832 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 833 | device_fc_files += $(call build_odm_policy, file_contexts) |
| 834 | endif |
| 835 | |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 836 | device_fcfiles_with_nl := $(call add_nl, $(device_fc_files), $(built_nl)) |
| 837 | |
| 838 | file_contexts.device.tmp := $(intermediates)/file_contexts.device.tmp |
| 839 | $(file_contexts.device.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 840 | $(file_contexts.device.tmp): $(device_fcfiles_with_nl) |
| 841 | @mkdir -p $(dir $@) |
| 842 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $^ > $@ |
| 843 | |
| 844 | file_contexts.device.sorted.tmp := $(intermediates)/file_contexts.device.sorted.tmp |
| 845 | $(file_contexts.device.sorted.tmp): PRIVATE_SEPOLICY := $(built_sepolicy) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 846 | $(file_contexts.device.sorted.tmp): $(file_contexts.device.tmp) $(built_sepolicy) \ |
| 847 | $(HOST_OUT_EXECUTABLES)/fc_sort $(HOST_OUT_EXECUTABLES)/checkfc |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 848 | @mkdir -p $(dir $@) |
dcashman | 0779155 | 2016-12-07 11:27:47 -0800 | [diff] [blame] | 849 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -e $(PRIVATE_SEPOLICY) $< |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 850 | $(hide) $(HOST_OUT_EXECUTABLES)/fc_sort $< $@ |
| 851 | |
| 852 | file_contexts.concat.tmp := $(intermediates)/file_contexts.concat.tmp |
| 853 | $(file_contexts.concat.tmp): $(file_contexts.local.tmp) $(file_contexts.device.sorted.tmp) |
| 854 | @mkdir -p $(dir $@) |
| 855 | $(hide) m4 -s $^ > $@ |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 856 | |
William Roberts | 3746a0a | 2015-09-25 10:18:44 -0700 | [diff] [blame] | 857 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 858 | $(LOCAL_BUILT_MODULE): $(file_contexts.concat.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/sefcontext_compile $(HOST_OUT_EXECUTABLES)/checkfc |
Richard Haines | c2d0191 | 2015-08-06 17:43:52 +0100 | [diff] [blame] | 859 | @mkdir -p $(dir $@) |
dcashman | 0779155 | 2016-12-07 11:27:47 -0800 | [diff] [blame] | 860 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $< |
Richard Haines | c2d0191 | 2015-08-06 17:43:52 +0100 | [diff] [blame] | 861 | $(hide) $(HOST_OUT_EXECUTABLES)/sefcontext_compile -o $@ $< |
| 862 | |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 863 | built_fc := $(LOCAL_BUILT_MODULE) |
William Roberts | 49693f1 | 2016-01-04 12:20:57 -0800 | [diff] [blame] | 864 | local_fc_files := |
| 865 | local_fcfiles_with_nl := |
| 866 | device_fc_files := |
| 867 | device_fcfiles_with_nl := |
| 868 | file_contexts.concat.tmp := |
| 869 | file_contexts.device.sorted.tmp := |
| 870 | file_contexts.device.tmp := |
| 871 | file_contexts.local.tmp := |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 872 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 873 | ################################## |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 874 | ifneq ($(TARGET_BUILD_VARIANT), user) |
| 875 | include $(CLEAR_VARS) |
| 876 | |
| 877 | LOCAL_MODULE := selinux_denial_metadata |
| 878 | LOCAL_MODULE_CLASS := ETC |
| 879 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 880 | |
| 881 | include $(BUILD_SYSTEM)/base_rules.mk |
| 882 | |
| 883 | bug_files := $(call build_policy, bug_map, $(LOCAL_PATH) $(PLAT_PRIVATE_POLICY) $(PLAT_VENDOR_POLICY) $(BOARD_SEPOLICY_DIRS) $(PLAT_PUBLIC_POLICY)) |
| 884 | |
| 885 | $(LOCAL_BUILT_MODULE) : $(bug_files) |
| 886 | @mkdir -p $(dir $@) |
| 887 | cat $^ > $@ |
| 888 | |
| 889 | bug_files := |
| 890 | endif |
| 891 | ################################## |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 892 | include $(CLEAR_VARS) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 893 | |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 894 | LOCAL_MODULE := plat_file_contexts |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 895 | LOCAL_MODULE_CLASS := ETC |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 896 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 897 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 0cb417a | 2017-03-08 14:12:54 -0800 | [diff] [blame] | 898 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
Jeff Vander Stoep | 7a68c5a | 2017-06-08 13:24:15 -0700 | [diff] [blame] | 899 | else |
| 900 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 901 | endif |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 902 | |
| 903 | include $(BUILD_SYSTEM)/base_rules.mk |
| 904 | |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 905 | local_fc_files := $(call build_policy, file_contexts, $(PLAT_PRIVATE_POLICY)) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 906 | ifneq ($(filter address,$(SANITIZE_TARGET)),) |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 907 | local_fc_files += $(wildcard $(addsuffix /file_contexts_asan, $(PLAT_PRIVATE_POLICY))) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 908 | endif |
Alex Klyubin | e4665d7 | 2017-01-19 19:58:34 -0800 | [diff] [blame] | 909 | local_fcfiles_with_nl := $(call add_nl, $(local_fc_files), $(built_nl)) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 910 | |
Alex Klyubin | e4665d7 | 2017-01-19 19:58:34 -0800 | [diff] [blame] | 911 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_FILES := $(local_fcfiles_with_nl) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 912 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Alex Klyubin | e4665d7 | 2017-01-19 19:58:34 -0800 | [diff] [blame] | 913 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_SORT := $(HOST_OUT_EXECUTABLES)/fc_sort |
| 914 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/checkfc $(HOST_OUT_EXECUTABLES)/fc_sort \ |
| 915 | $(local_fcfiles_with_nl) $(built_sepolicy) |
Richard Haines | c2d0191 | 2015-08-06 17:43:52 +0100 | [diff] [blame] | 916 | @mkdir -p $(dir $@) |
Alex Klyubin | e4665d7 | 2017-01-19 19:58:34 -0800 | [diff] [blame] | 917 | $(hide) m4 -s $(PRIVATE_FC_FILES) > $@.tmp |
| 918 | $(hide) $< $(PRIVATE_SEPOLICY) $@.tmp |
| 919 | $(hide) $(PRIVATE_FC_SORT) $@.tmp $@ |
Richard Haines | c2d0191 | 2015-08-06 17:43:52 +0100 | [diff] [blame] | 920 | |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 921 | built_plat_fc := $(LOCAL_BUILT_MODULE) |
| 922 | local_fc_files := |
Alex Klyubin | e4665d7 | 2017-01-19 19:58:34 -0800 | [diff] [blame] | 923 | local_fcfiles_with_nl := |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 924 | |
| 925 | ################################## |
| 926 | include $(CLEAR_VARS) |
| 927 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 928 | LOCAL_MODULE := vendor_file_contexts |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 929 | LOCAL_MODULE_CLASS := ETC |
| 930 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 931 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 0cb417a | 2017-03-08 14:12:54 -0800 | [diff] [blame] | 932 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
Jeff Vander Stoep | 7a68c5a | 2017-06-08 13:24:15 -0700 | [diff] [blame] | 933 | else |
| 934 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 935 | endif |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 936 | |
| 937 | include $(BUILD_SYSTEM)/base_rules.mk |
| 938 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 939 | vendor_fc_files := $(call build_vendor_policy, file_contexts) |
| 940 | vendor_fcfiles_with_nl := $(call add_nl, $(vendor_fc_files), $(built_nl)) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 941 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 942 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_FILES := $(vendor_fcfiles_with_nl) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 943 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 944 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_SORT := $(HOST_OUT_EXECUTABLES)/fc_sort |
| 945 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/checkfc $(HOST_OUT_EXECUTABLES)/fc_sort \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 946 | $(vendor_fcfiles_with_nl) $(built_sepolicy) |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 947 | @mkdir -p $(dir $@) |
| 948 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_FC_FILES) > $@.tmp |
| 949 | $(hide) $< $(PRIVATE_SEPOLICY) $@.tmp |
| 950 | $(hide) $(PRIVATE_FC_SORT) $@.tmp $@ |
| 951 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 952 | built_vendor_fc := $(LOCAL_BUILT_MODULE) |
| 953 | vendor_fc_files := |
| 954 | vendor_fcfiles_with_nl := |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 955 | |
| 956 | ################################## |
| 957 | include $(CLEAR_VARS) |
Jeff Vander Stoep | b236eb6 | 2017-06-13 08:24:17 -0700 | [diff] [blame] | 958 | |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 959 | LOCAL_MODULE := odm_file_contexts |
| 960 | LOCAL_MODULE_CLASS := ETC |
| 961 | LOCAL_MODULE_TAGS := optional |
| 962 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 963 | |
| 964 | include $(BUILD_SYSTEM)/base_rules.mk |
| 965 | |
| 966 | odm_fc_files := $(call build_odm_policy, file_contexts) |
| 967 | odm_fcfiles_with_nl := $(call add_nl, $(odm_fc_files), $(built_nl)) |
| 968 | |
| 969 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_FILES := $(odm_fcfiles_with_nl) |
| 970 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 971 | $(LOCAL_BUILT_MODULE): PRIVATE_FC_SORT := $(HOST_OUT_EXECUTABLES)/fc_sort |
| 972 | $(LOCAL_BUILT_MODULE): $(HOST_OUT_EXECUTABLES)/checkfc $(HOST_OUT_EXECUTABLES)/fc_sort \ |
| 973 | $(odm_fcfiles_with_nl) $(built_sepolicy) |
| 974 | @mkdir -p $(dir $@) |
| 975 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_FC_FILES) > $@.tmp |
| 976 | $(hide) $< $(PRIVATE_SEPOLICY) $@.tmp |
| 977 | $(hide) $(PRIVATE_FC_SORT) $@.tmp $@ |
| 978 | |
| 979 | built_odm_fc := $(LOCAL_BUILT_MODULE) |
| 980 | odm_fc_files := |
| 981 | odm_fcfiles_with_nl := |
| 982 | |
| 983 | ################################## |
| 984 | include $(CLEAR_VARS) |
| 985 | |
Jeff Vander Stoep | b236eb6 | 2017-06-13 08:24:17 -0700 | [diff] [blame] | 986 | LOCAL_MODULE := plat_file_contexts.recovery |
| 987 | LOCAL_MODULE_STEM := plat_file_contexts |
| 988 | LOCAL_MODULE_CLASS := ETC |
| 989 | LOCAL_MODULE_TAGS := optional |
| 990 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 991 | |
| 992 | include $(BUILD_SYSTEM)/base_rules.mk |
| 993 | |
| 994 | $(LOCAL_BUILT_MODULE): $(built_plat_fc) |
| 995 | $(hide) cp -f $< $@ |
| 996 | |
| 997 | ################################## |
| 998 | include $(CLEAR_VARS) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 999 | LOCAL_MODULE := vendor_file_contexts.recovery |
| 1000 | LOCAL_MODULE_STEM := vendor_file_contexts |
Jeff Vander Stoep | b236eb6 | 2017-06-13 08:24:17 -0700 | [diff] [blame] | 1001 | LOCAL_MODULE_CLASS := ETC |
| 1002 | LOCAL_MODULE_TAGS := optional |
| 1003 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 1004 | |
| 1005 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1006 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1007 | $(LOCAL_BUILT_MODULE): $(built_vendor_fc) |
Jeff Vander Stoep | b236eb6 | 2017-06-13 08:24:17 -0700 | [diff] [blame] | 1008 | $(hide) cp -f $< $@ |
| 1009 | |
| 1010 | ################################## |
| 1011 | include $(CLEAR_VARS) |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 1012 | LOCAL_MODULE := odm_file_contexts.recovery |
| 1013 | LOCAL_MODULE_STEM := odm_file_contexts |
| 1014 | LOCAL_MODULE_CLASS := ETC |
| 1015 | LOCAL_MODULE_TAGS := optional |
| 1016 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 1017 | |
| 1018 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1019 | |
| 1020 | $(LOCAL_BUILT_MODULE): $(built_odm_fc) |
| 1021 | $(hide) cp -f $< $@ |
| 1022 | |
| 1023 | ################################## |
| 1024 | include $(CLEAR_VARS) |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1025 | LOCAL_MODULE := plat_seapp_contexts |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1026 | LOCAL_MODULE_CLASS := ETC |
| 1027 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1028 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1029 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 1030 | else |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1031 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1032 | endif |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1033 | |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 1034 | include $(BUILD_SYSTEM)/base_rules.mk |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1035 | |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1036 | plat_sc_files := $(call build_policy, seapp_contexts, $(PLAT_PRIVATE_POLICY)) |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 1037 | |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 1038 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1039 | $(LOCAL_BUILT_MODULE): PRIVATE_SC_FILES := $(plat_sc_files) |
| 1040 | $(LOCAL_BUILT_MODULE): $(built_sepolicy) $(plat_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp |
William Roberts | f0e0a94 | 2012-08-27 15:41:15 -0700 | [diff] [blame] | 1041 | @mkdir -p $(dir $@) |
William Roberts | 99fe8df | 2015-06-30 13:53:51 -0700 | [diff] [blame] | 1042 | $(hide) $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILES) |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1043 | |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1044 | built_plat_sc := $(LOCAL_BUILT_MODULE) |
| 1045 | plat_sc_files := |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 1046 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 1047 | ################################## |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1048 | include $(CLEAR_VARS) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1049 | LOCAL_MODULE := vendor_seapp_contexts |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1050 | LOCAL_MODULE_CLASS := ETC |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1051 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1052 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1053 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 1054 | else |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1055 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1056 | endif |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1057 | |
| 1058 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1059 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1060 | vendor_sc_files := $(call build_policy, seapp_contexts, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
Dan Cashman | 1b0a71f | 2017-05-08 14:26:52 -0700 | [diff] [blame] | 1061 | plat_sc_neverallow_files := $(call build_policy, seapp_contexts, $(PLAT_PRIVATE_POLICY)) |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1062 | |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1063 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1064 | $(LOCAL_BUILT_MODULE): PRIVATE_SC_FILES := $(vendor_sc_files) |
Jeff Vander Stoep | 87ae5f7 | 2017-03-06 22:53:09 -0800 | [diff] [blame] | 1065 | $(LOCAL_BUILT_MODULE): PRIVATE_SC_NEVERALLOW_FILES := $(plat_sc_neverallow_files) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1066 | $(LOCAL_BUILT_MODULE): $(built_sepolicy) $(vendor_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp $(plat_sc_neverallow_files) |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1067 | @mkdir -p $(dir $@) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1068 | $(hide) grep -ihe '^neverallow' $(PRIVATE_SC_NEVERALLOW_FILES) > $@.tmp |
Xin Li | ec6f393 | 2017-03-14 16:51:13 -0700 | [diff] [blame] | 1069 | $(hide) $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILES) $@.tmp |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1070 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1071 | built_vendor_sc := $(LOCAL_BUILT_MODULE) |
| 1072 | vendor_sc_files := |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 1073 | |
| 1074 | ################################## |
| 1075 | include $(CLEAR_VARS) |
Bowgo Tsai | ecf656b | 2017-11-29 16:15:28 +0800 | [diff] [blame] | 1076 | LOCAL_MODULE := odm_seapp_contexts |
| 1077 | LOCAL_MODULE_CLASS := ETC |
| 1078 | LOCAL_MODULE_TAGS := optional |
| 1079 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 1080 | |
| 1081 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1082 | |
| 1083 | odm_sc_files := $(call build_policy, seapp_contexts, $(BOARD_ODM_SEPOLICY_DIRS)) |
| 1084 | plat_sc_neverallow_files := $(call build_policy, seapp_contexts, $(PLAT_PRIVATE_POLICY)) |
| 1085 | |
| 1086 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 1087 | $(LOCAL_BUILT_MODULE): PRIVATE_SC_FILES := $(odm_sc_files) |
| 1088 | $(LOCAL_BUILT_MODULE): PRIVATE_SC_NEVERALLOW_FILES := $(plat_sc_neverallow_files) |
| 1089 | $(LOCAL_BUILT_MODULE): $(built_sepolicy) $(odm_sc_files) $(HOST_OUT_EXECUTABLES)/checkseapp $(plat_sc_neverallow_files) |
| 1090 | @mkdir -p $(dir $@) |
| 1091 | $(hide) grep -ihe '^neverallow' $(PRIVATE_SC_NEVERALLOW_FILES) > $@.tmp |
| 1092 | $(hide) $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $(PRIVATE_SC_FILES) $@.tmp |
| 1093 | |
| 1094 | built_odm_sc := $(LOCAL_BUILT_MODULE) |
| 1095 | odm_sc_files := |
| 1096 | |
| 1097 | ################################## |
| 1098 | include $(CLEAR_VARS) |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1099 | LOCAL_MODULE := plat_seapp_neverallows |
William Roberts | 4ee7131 | 2015-06-25 11:59:30 -0700 | [diff] [blame] | 1100 | LOCAL_MODULE_CLASS := ETC |
| 1101 | LOCAL_MODULE_TAGS := tests |
| 1102 | |
| 1103 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1104 | |
Jeff Vander Stoep | 87ae5f7 | 2017-03-06 22:53:09 -0800 | [diff] [blame] | 1105 | $(LOCAL_BUILT_MODULE): $(plat_sc_neverallow_files) |
William Roberts | 4ee7131 | 2015-06-25 11:59:30 -0700 | [diff] [blame] | 1106 | @mkdir -p $(dir $@) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1107 | - $(hide) grep -ihe '^neverallow' $< > $@ |
William Roberts | 4ee7131 | 2015-06-25 11:59:30 -0700 | [diff] [blame] | 1108 | |
Jeff Vander Stoep | 87ae5f7 | 2017-03-06 22:53:09 -0800 | [diff] [blame] | 1109 | plat_sc_neverallow_files := |
William Roberts | 4ee7131 | 2015-06-25 11:59:30 -0700 | [diff] [blame] | 1110 | |
| 1111 | ################################## |
| 1112 | include $(CLEAR_VARS) |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1113 | |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1114 | LOCAL_MODULE := plat_property_contexts |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1115 | LOCAL_MODULE_CLASS := ETC |
| 1116 | LOCAL_MODULE_TAGS := optional |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1117 | |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1118 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1119 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 1120 | else |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1121 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1122 | endif |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1123 | |
| 1124 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1125 | |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1126 | plat_pcfiles := $(call build_policy, property_contexts, $(PLAT_PRIVATE_POLICY)) |
Jaekyun Seok | e497145 | 2017-10-19 16:54:49 +0900 | [diff] [blame] | 1127 | ifeq ($(PRODUCT_COMPATIBLE_PROPERTY),true) |
| 1128 | plat_pcfiles += $(LOCAL_PATH)/public/property_contexts |
| 1129 | endif |
William Roberts | 6aabc1c | 2015-07-30 11:44:26 -0700 | [diff] [blame] | 1130 | |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1131 | plat_property_contexts.tmp := $(intermediates)/plat_property_contexts.tmp |
| 1132 | $(plat_property_contexts.tmp): PRIVATE_PC_FILES := $(plat_pcfiles) |
| 1133 | $(plat_property_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1134 | $(plat_property_contexts.tmp): $(plat_pcfiles) |
William Roberts | 7f81b33 | 2015-09-29 13:52:37 -0700 | [diff] [blame] | 1135 | @mkdir -p $(dir $@) |
Colin Cross | 9eb6c87 | 2015-10-01 21:25:09 +0000 | [diff] [blame] | 1136 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_PC_FILES) > $@ |
Tom Cherry | f68b4c6 | 2018-01-04 09:46:48 -0800 | [diff] [blame] | 1137 | $(LOCAL_BUILT_MODULE): $(plat_property_contexts.tmp) $(HOST_OUT_EXECUTABLES)/property_info_checker |
William Roberts | dcffd2b | 2015-09-29 13:52:37 -0700 | [diff] [blame] | 1138 | @mkdir -p $(dir $@) |
Tom Cherry | f68b4c6 | 2018-01-04 09:46:48 -0800 | [diff] [blame] | 1139 | $(hide) cp -f $< $@ |
| 1140 | $(hide) $(HOST_OUT_EXECUTABLES)/property_info_checker $@ |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1141 | |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1142 | built_plat_pc := $(LOCAL_BUILT_MODULE) |
| 1143 | plat_pcfiles := |
| 1144 | plat_property_contexts.tmp := |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 1145 | |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 1146 | ################################## |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1147 | include $(CLEAR_VARS) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1148 | LOCAL_MODULE := vendor_property_contexts |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1149 | LOCAL_MODULE_CLASS := ETC |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1150 | LOCAL_MODULE_TAGS := optional |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1151 | |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1152 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1153 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 1154 | else |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1155 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Alex Klyubin | 9d59041 | 2017-03-08 13:10:05 -0800 | [diff] [blame] | 1156 | endif |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1157 | |
Stephen Smalley | c936173 | 2015-03-13 09:36:57 -0400 | [diff] [blame] | 1158 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1159 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1160 | vendor_pcfiles := $(call build_policy, property_contexts, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
Sandeep Patil | 262edc3 | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1161 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1162 | vendor_property_contexts.tmp := $(intermediates)/vendor_property_contexts.tmp |
| 1163 | $(vendor_property_contexts.tmp): PRIVATE_PC_FILES := $(vendor_pcfiles) |
| 1164 | $(vendor_property_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1165 | $(vendor_property_contexts.tmp): $(vendor_pcfiles) |
William Roberts | dcffd2b | 2015-09-29 13:52:37 -0700 | [diff] [blame] | 1166 | @mkdir -p $(dir $@) |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1167 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_PC_FILES) > $@ |
| 1168 | |
| 1169 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1170 | $(LOCAL_BUILT_MODULE): $(vendor_property_contexts.tmp) $(HOST_OUT_EXECUTABLES)/property_info_checker |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1171 | @mkdir -p $(dir $@) |
Tom Cherry | f68b4c6 | 2018-01-04 09:46:48 -0800 | [diff] [blame] | 1172 | $(hide) cp -f $< $@ |
| 1173 | $(hide) $(HOST_OUT_EXECUTABLES)/property_info_checker $@ |
William Roberts | dcffd2b | 2015-09-29 13:52:37 -0700 | [diff] [blame] | 1174 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1175 | built_vendor_pc := $(LOCAL_BUILT_MODULE) |
| 1176 | vendor_pcfiles := |
| 1177 | vendor_property_contexts.tmp := |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1178 | |
| 1179 | ################################## |
| 1180 | include $(CLEAR_VARS) |
Bowgo Tsai | 1f717b1 | 2017-11-29 16:15:55 +0800 | [diff] [blame^] | 1181 | LOCAL_MODULE := odm_property_contexts |
| 1182 | LOCAL_MODULE_CLASS := ETC |
| 1183 | LOCAL_MODULE_TAGS := optional |
| 1184 | LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux |
| 1185 | |
| 1186 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1187 | |
| 1188 | odm_pcfiles := $(call build_policy, property_contexts, $(BOARD_ODM_SEPOLICY_DIRS)) |
| 1189 | |
| 1190 | odm_property_contexts.tmp := $(intermediates)/odm_property_contexts.tmp |
| 1191 | $(odm_property_contexts.tmp): PRIVATE_PC_FILES := $(odm_pcfiles) |
| 1192 | $(odm_property_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1193 | $(odm_property_contexts.tmp): $(odm_pcfiles) |
| 1194 | @mkdir -p $(dir $@) |
| 1195 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_PC_FILES) > $@ |
| 1196 | |
| 1197 | |
| 1198 | $(LOCAL_BUILT_MODULE): $(odm_property_contexts.tmp) $(HOST_OUT_EXECUTABLES)/property_info_checker |
| 1199 | @mkdir -p $(dir $@) |
| 1200 | $(hide) cp -f $< $@ |
| 1201 | $(hide) $(HOST_OUT_EXECUTABLES)/property_info_checker $@ |
| 1202 | |
| 1203 | built_odm_pc := $(LOCAL_BUILT_MODULE) |
| 1204 | odm_pcfiles := |
| 1205 | odm_property_contexts.tmp := |
| 1206 | |
| 1207 | ################################## |
| 1208 | include $(CLEAR_VARS) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1209 | |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 1210 | LOCAL_MODULE := plat_property_contexts.recovery |
| 1211 | LOCAL_MODULE_STEM := plat_property_contexts |
| 1212 | LOCAL_MODULE_CLASS := ETC |
| 1213 | LOCAL_MODULE_TAGS := optional |
| 1214 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 1215 | |
| 1216 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1217 | |
| 1218 | $(LOCAL_BUILT_MODULE): $(built_plat_pc) |
| 1219 | $(hide) cp -f $< $@ |
| 1220 | |
| 1221 | ################################## |
| 1222 | include $(CLEAR_VARS) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1223 | LOCAL_MODULE := vendor_property_contexts.recovery |
| 1224 | LOCAL_MODULE_STEM := vendor_property_contexts |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 1225 | LOCAL_MODULE_CLASS := ETC |
| 1226 | LOCAL_MODULE_TAGS := optional |
| 1227 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 1228 | |
| 1229 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1230 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1231 | $(LOCAL_BUILT_MODULE): $(built_vendor_pc) |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 1232 | $(hide) cp -f $< $@ |
| 1233 | |
| 1234 | ################################## |
| 1235 | include $(CLEAR_VARS) |
Bowgo Tsai | 1f717b1 | 2017-11-29 16:15:55 +0800 | [diff] [blame^] | 1236 | LOCAL_MODULE := odm_property_contexts.recovery |
| 1237 | LOCAL_MODULE_STEM := odm_property_contexts |
| 1238 | LOCAL_MODULE_CLASS := ETC |
| 1239 | LOCAL_MODULE_TAGS := optional |
| 1240 | LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT) |
| 1241 | |
| 1242 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1243 | |
| 1244 | $(LOCAL_BUILT_MODULE): $(built_odm_pc) |
| 1245 | $(hide) cp -f $< $@ |
| 1246 | |
| 1247 | ################################## |
| 1248 | include $(CLEAR_VARS) |
Alex Klyubin | ec78c37 | 2017-03-10 12:44:16 -0800 | [diff] [blame] | 1249 | |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1250 | LOCAL_MODULE := plat_service_contexts |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1251 | LOCAL_MODULE_CLASS := ETC |
| 1252 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1253 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1254 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 1255 | else |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1256 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Jeff Vander Stoep | 4e3a4c7 | 2017-03-08 22:28:03 -0800 | [diff] [blame] | 1257 | endif |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1258 | |
| 1259 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1260 | |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1261 | plat_svcfiles := $(call build_policy, service_contexts, $(PLAT_PRIVATE_POLICY)) |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1262 | |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1263 | plat_service_contexts.tmp := $(intermediates)/plat_service_contexts.tmp |
| 1264 | $(plat_service_contexts.tmp): PRIVATE_SVC_FILES := $(plat_svcfiles) |
| 1265 | $(plat_service_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1266 | $(plat_service_contexts.tmp): $(plat_svcfiles) |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1267 | @mkdir -p $(dir $@) |
William Roberts | 6aabc1c | 2015-07-30 11:44:26 -0700 | [diff] [blame] | 1268 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@ |
William Roberts | 7fc865a | 2015-09-29 14:17:38 -0700 | [diff] [blame] | 1269 | |
| 1270 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1271 | $(LOCAL_BUILT_MODULE): $(plat_service_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP) |
William Roberts | 7fc865a | 2015-09-29 14:17:38 -0700 | [diff] [blame] | 1272 | @mkdir -p $(dir $@) |
William Roberts | c9fce3f | 2016-04-06 11:53:04 -0700 | [diff] [blame] | 1273 | sed -e 's/#.*$$//' -e '/^$$/d' $< > $@ |
dcashman | 0779155 | 2016-12-07 11:27:47 -0800 | [diff] [blame] | 1274 | $(HOST_OUT_EXECUTABLES)/checkfc -s $(PRIVATE_SEPOLICY) $@ |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1275 | |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1276 | built_plat_svc := $(LOCAL_BUILT_MODULE) |
| 1277 | plat_svcfiles := |
| 1278 | plat_service_contexts.tmp := |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 1279 | |
| 1280 | ################################## |
Hung-ying Tyan | e83f1e5 | 2017-09-05 21:51:52 +0800 | [diff] [blame] | 1281 | # nonplat_service_contexts is only allowed on non-full-treble devices |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1282 | ifneq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Hung-ying Tyan | e83f1e5 | 2017-09-05 21:51:52 +0800 | [diff] [blame] | 1283 | |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1284 | include $(CLEAR_VARS) |
| 1285 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1286 | LOCAL_MODULE := vendor_service_contexts |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1287 | LOCAL_MODULE_CLASS := ETC |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1288 | LOCAL_MODULE_TAGS := optional |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1289 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1290 | |
| 1291 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1292 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1293 | vendor_svcfiles := $(call build_policy, service_contexts, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1294 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1295 | vendor_service_contexts.tmp := $(intermediates)/vendor_service_contexts.tmp |
| 1296 | $(vendor_service_contexts.tmp): PRIVATE_SVC_FILES := $(vendor_svcfiles) |
| 1297 | $(vendor_service_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1298 | $(vendor_service_contexts.tmp): $(vendor_svcfiles) |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1299 | @mkdir -p $(dir $@) |
| 1300 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@ |
| 1301 | |
| 1302 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1303 | $(LOCAL_BUILT_MODULE): $(vendor_service_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP) |
William Roberts | 7fc865a | 2015-09-29 14:17:38 -0700 | [diff] [blame] | 1304 | @mkdir -p $(dir $@) |
William Roberts | c9fce3f | 2016-04-06 11:53:04 -0700 | [diff] [blame] | 1305 | sed -e 's/#.*$$//' -e '/^$$/d' $< > $@ |
dcashman | 0779155 | 2016-12-07 11:27:47 -0800 | [diff] [blame] | 1306 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -s $(PRIVATE_SEPOLICY) $@ |
William Roberts | 7fc865a | 2015-09-29 14:17:38 -0700 | [diff] [blame] | 1307 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1308 | built_vendor_svc := $(LOCAL_BUILT_MODULE) |
| 1309 | vendor_svcfiles := |
| 1310 | vendor_service_contexts.tmp := |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1311 | |
Hung-ying Tyan | e83f1e5 | 2017-09-05 21:51:52 +0800 | [diff] [blame] | 1312 | endif |
| 1313 | |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 1314 | ################################## |
| 1315 | include $(CLEAR_VARS) |
| 1316 | |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1317 | LOCAL_MODULE := plat_hwservice_contexts |
| 1318 | LOCAL_MODULE_CLASS := ETC |
| 1319 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1320 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1321 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
| 1322 | else |
| 1323 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 1324 | endif |
| 1325 | |
| 1326 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1327 | |
| 1328 | plat_hwsvcfiles := $(call build_policy, hwservice_contexts, $(PLAT_PRIVATE_POLICY)) |
| 1329 | |
| 1330 | plat_hwservice_contexts.tmp := $(intermediates)/plat_hwservice_contexts.tmp |
| 1331 | $(plat_hwservice_contexts.tmp): PRIVATE_SVC_FILES := $(plat_hwsvcfiles) |
| 1332 | $(plat_hwservice_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1333 | $(plat_hwservice_contexts.tmp): $(plat_hwsvcfiles) |
| 1334 | @mkdir -p $(dir $@) |
| 1335 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@ |
| 1336 | |
| 1337 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 1338 | $(LOCAL_BUILT_MODULE): $(plat_hwservice_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP) |
| 1339 | @mkdir -p $(dir $@) |
| 1340 | sed -e 's/#.*$$//' -e '/^$$/d' $< > $@ |
| 1341 | $(HOST_OUT_EXECUTABLES)/checkfc -e -l $(PRIVATE_SEPOLICY) $@ |
| 1342 | |
| 1343 | plat_hwsvcfiles := |
| 1344 | plat_hwservice_contexts.tmp := |
| 1345 | |
| 1346 | ################################## |
| 1347 | include $(CLEAR_VARS) |
| 1348 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1349 | LOCAL_MODULE := vendor_hwservice_contexts |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1350 | LOCAL_MODULE_CLASS := ETC |
| 1351 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1352 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1353 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 1354 | else |
| 1355 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 1356 | endif |
| 1357 | |
| 1358 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1359 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1360 | vendor_hwsvcfiles := $(call build_policy, hwservice_contexts, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1361 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1362 | vendor_hwservice_contexts.tmp := $(intermediates)/vendor_hwservice_contexts.tmp |
| 1363 | $(vendor_hwservice_contexts.tmp): PRIVATE_SVC_FILES := $(vendor_hwsvcfiles) |
| 1364 | $(vendor_hwservice_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1365 | $(vendor_hwservice_contexts.tmp): $(vendor_hwsvcfiles) |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1366 | @mkdir -p $(dir $@) |
| 1367 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@ |
| 1368 | |
| 1369 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1370 | $(LOCAL_BUILT_MODULE): $(vendor_hwservice_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP) |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1371 | @mkdir -p $(dir $@) |
| 1372 | sed -e 's/#.*$$//' -e '/^$$/d' $< > $@ |
| 1373 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -e -l $(PRIVATE_SEPOLICY) $@ |
| 1374 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1375 | vendor_hwsvcfiles := |
| 1376 | vendor_hwservice_contexts.tmp := |
| 1377 | |
Martijn Coenen | 3ea47b9 | 2017-04-07 16:14:43 -0700 | [diff] [blame] | 1378 | |
| 1379 | ################################## |
| 1380 | include $(CLEAR_VARS) |
| 1381 | |
Martijn Coenen | 6676c23 | 2017-03-31 17:29:53 -0700 | [diff] [blame] | 1382 | LOCAL_MODULE := vndservice_contexts |
| 1383 | LOCAL_MODULE_CLASS := ETC |
| 1384 | LOCAL_MODULE_TAGS := optional |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1385 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Martijn Coenen | 6676c23 | 2017-03-31 17:29:53 -0700 | [diff] [blame] | 1386 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
| 1387 | else |
| 1388 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 1389 | endif |
| 1390 | |
| 1391 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1392 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1393 | vnd_svcfiles := $(call build_policy, vndservice_contexts, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
Martijn Coenen | 6676c23 | 2017-03-31 17:29:53 -0700 | [diff] [blame] | 1394 | |
| 1395 | vndservice_contexts.tmp := $(intermediates)/vndservice_contexts.tmp |
| 1396 | $(vndservice_contexts.tmp): PRIVATE_SVC_FILES := $(vnd_svcfiles) |
| 1397 | $(vndservice_contexts.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1398 | $(vndservice_contexts.tmp): $(vnd_svcfiles) |
| 1399 | @mkdir -p $(dir $@) |
| 1400 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_SVC_FILES) > $@ |
| 1401 | |
| 1402 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 1403 | $(LOCAL_BUILT_MODULE): $(vndservice_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc $(ACP) |
| 1404 | @mkdir -p $(dir $@) |
| 1405 | sed -e 's/#.*$$//' -e '/^$$/d' $< > $@ |
Martijn Coenen | ee97662 | 2017-04-07 10:08:55 -0700 | [diff] [blame] | 1406 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -e -v $(PRIVATE_SEPOLICY) $@ |
Martijn Coenen | 6676c23 | 2017-03-31 17:29:53 -0700 | [diff] [blame] | 1407 | |
| 1408 | vnd_svcfiles := |
| 1409 | vndservice_contexts.tmp := |
| 1410 | ################################## |
| 1411 | include $(CLEAR_VARS) |
| 1412 | |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1413 | LOCAL_MODULE := plat_mac_permissions.xml |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1414 | LOCAL_MODULE_CLASS := ETC |
| 1415 | LOCAL_MODULE_TAGS := optional |
Jeff Vander Stoep | bba9e7b | 2017-03-10 15:51:23 -0800 | [diff] [blame] | 1416 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1417 | |
William Roberts | 2c8a55d | 2012-11-30 14:59:09 -0800 | [diff] [blame] | 1418 | include $(BUILD_SYSTEM)/base_rules.mk |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1419 | |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 1420 | # Build keys.conf |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1421 | plat_mac_perms_keys.tmp := $(intermediates)/plat_keys.tmp |
| 1422 | $(plat_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1423 | $(plat_mac_perms_keys.tmp): $(call build_policy, keys.conf, $(PLAT_PRIVATE_POLICY)) |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 1424 | @mkdir -p $(dir $@) |
William Roberts | d218558 | 2015-07-16 11:28:02 -0700 | [diff] [blame] | 1425 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $^ > $@ |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 1426 | |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1427 | all_plat_mac_perms_files := $(call build_policy, mac_permissions.xml, $(PLAT_PRIVATE_POLICY)) |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1428 | |
Shinichiro Hamaji | ef0c14d | 2016-05-13 16:04:58 +0900 | [diff] [blame] | 1429 | # Should be synced with keys.conf. |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1430 | all_plat_keys := platform media shared testkey |
| 1431 | all_plat_keys := $(all_keys:%=$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))/%.x509.pem) |
Shinichiro Hamaji | ef0c14d | 2016-05-13 16:04:58 +0900 | [diff] [blame] | 1432 | |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1433 | $(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_plat_mac_perms_files) |
| 1434 | $(LOCAL_BUILT_MODULE): $(plat_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys.py \ |
| 1435 | $(all_plat_mac_perms_files) $(all_plat_keys) |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 1436 | @mkdir -p $(dir $@) |
Nick Kralevich | c3c9052 | 2013-10-25 12:25:36 -0700 | [diff] [blame] | 1437 | $(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \ |
William Roberts | 6aabc1c | 2015-07-30 11:44:26 -0700 | [diff] [blame] | 1438 | $(HOST_OUT_EXECUTABLES)/insertkeys.py -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES) |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 1439 | |
William Roberts | 6aabc1c | 2015-07-30 11:44:26 -0700 | [diff] [blame] | 1440 | all_mac_perms_files := |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1441 | all_plat_keys := |
| 1442 | plat_mac_perms_keys.tmp := |
| 1443 | |
| 1444 | ################################## |
| 1445 | include $(CLEAR_VARS) |
| 1446 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1447 | LOCAL_MODULE := vendor_mac_permissions.xml |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1448 | LOCAL_MODULE_CLASS := ETC |
| 1449 | LOCAL_MODULE_TAGS := optional |
Jeff Vander Stoep | bba9e7b | 2017-03-10 15:51:23 -0800 | [diff] [blame] | 1450 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1451 | |
| 1452 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1453 | |
| 1454 | # Build keys.conf |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1455 | vendor_mac_perms_keys.tmp := $(intermediates)/vendor_keys.tmp |
| 1456 | $(vendor_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
| 1457 | $(vendor_mac_perms_keys.tmp): $(call build_policy, keys.conf, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1458 | @mkdir -p $(dir $@) |
| 1459 | $(hide) m4 -s $(PRIVATE_ADDITIONAL_M4DEFS) $^ > $@ |
| 1460 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1461 | all_vendor_mac_perms_files := $(call build_policy, mac_permissions.xml, $(PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(REQD_MASK_POLICY)) |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1462 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1463 | $(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_vendor_mac_perms_files) |
| 1464 | $(LOCAL_BUILT_MODULE): $(vendor_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys.py \ |
| 1465 | $(all_vendor_mac_perms_files) |
dcashman | 90b3b94 | 2016-12-14 13:47:55 -0800 | [diff] [blame] | 1466 | @mkdir -p $(dir $@) |
| 1467 | $(hide) $(HOST_OUT_EXECUTABLES)/insertkeys.py -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES) |
| 1468 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1469 | vendor_mac_perms_keys.tmp := |
| 1470 | all_vendor_mac_perms_files := |
William Roberts | 6aabc1c | 2015-07-30 11:44:26 -0700 | [diff] [blame] | 1471 | |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1472 | ################################# |
| 1473 | include $(CLEAR_VARS) |
| 1474 | LOCAL_MODULE := sepolicy_tests |
| 1475 | LOCAL_MODULE_CLASS := ETC |
| 1476 | LOCAL_MODULE_TAGS := tests |
| 1477 | |
| 1478 | include $(BUILD_SYSTEM)/base_rules.mk |
| 1479 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1480 | all_fc_files := $(built_plat_fc) $(built_vendor_fc) |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 1481 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 1482 | all_fc_files += $(built_odm_fc) |
| 1483 | endif |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1484 | all_fc_args := $(foreach file, $(all_fc_files), -f $(file)) |
| 1485 | |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1486 | sepolicy_tests := $(intermediates)/sepolicy_tests |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1487 | $(sepolicy_tests): ALL_FC_ARGS := $(all_fc_args) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1488 | $(sepolicy_tests): PRIVATE_SEPOLICY := $(built_sepolicy) |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1489 | $(sepolicy_tests): $(HOST_OUT_EXECUTABLES)/sepolicy_tests $(all_fc_files) $(built_sepolicy) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1490 | @mkdir -p $(dir $@) |
Jeff Vander Stoep | 3ca843a | 2017-10-04 09:42:29 -0700 | [diff] [blame] | 1491 | $(hide) $(HOST_OUT_EXECUTABLES)/sepolicy_tests -l $(HOST_OUT)/lib64/libsepolwrap.$(SHAREDLIB_EXT) \ |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1492 | $(ALL_FC_ARGS) -p $(PRIVATE_SEPOLICY) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1493 | $(hide) touch $@ |
| 1494 | |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 1495 | ################################## |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1496 | ifeq ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 1fc0682 | 2017-05-31 15:36:07 -0700 | [diff] [blame] | 1497 | |
Tri Vo | 1406926 | 2018-01-31 16:22:35 -0800 | [diff] [blame] | 1498 | intermediates := $(call intermediates-dir-for,ETC,built_plat_sepolicy,,,,) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1499 | |
| 1500 | # plat_sepolicy - the current platform policy only, built into a policy binary. |
| 1501 | # TODO - this currently excludes partner extensions, but support should be added |
| 1502 | # to enable partners to add their own compatibility mapping |
| 1503 | BASE_PLAT_PUBLIC_POLICY := $(filter-out $(BOARD_PLAT_PUBLIC_SEPOLICY_DIR), $(PLAT_PUBLIC_POLICY)) |
| 1504 | BASE_PLAT_PRIVATE_POLICY := $(filter-out $(BOARD_PLAT_PRIVATE_SEPOLICY_DIR), $(PLAT_PRIVATE_POLICY)) |
| 1505 | base_plat_policy.conf := $(intermediates)/base_plat_policy.conf |
| 1506 | $(base_plat_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 1507 | $(base_plat_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
Joel Galenson | 8c72eea | 2018-03-07 15:36:29 -0800 | [diff] [blame] | 1508 | $(base_plat_policy.conf): PRIVATE_TARGET_BUILD_VARIANT := $(TARGET_BUILD_VARIANT) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1509 | $(base_plat_policy.conf): PRIVATE_TGT_ARCH := $(my_target_arch) |
| 1510 | $(base_plat_policy.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan) |
| 1511 | $(base_plat_policy.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS) |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1512 | $(base_plat_policy.conf): PRIVATE_SEPOLICY_SPLIT := true |
Jaekyun Seok | e497145 | 2017-10-19 16:54:49 +0900 | [diff] [blame] | 1513 | $(base_plat_policy.conf): PRIVATE_COMPATIBLE_PROPERTY := $(PRODUCT_COMPATIBLE_PROPERTY) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1514 | $(base_plat_policy.conf): $(call build_policy, $(sepolicy_build_files), \ |
| 1515 | $(BASE_PLAT_PUBLIC_POLICY) $(BASE_PLAT_PRIVATE_POLICY)) |
| 1516 | $(transform-policy-to-conf) |
| 1517 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 1518 | |
| 1519 | built_plat_sepolicy := $(intermediates)/built_plat_sepolicy |
| 1520 | $(built_plat_sepolicy): PRIVATE_ADDITIONAL_CIL_FILES := \ |
| 1521 | $(call build_policy, $(sepolicy_build_cil_workaround_files), $(BASE_PLAT_PRIVATE_POLICY)) |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 1522 | $(built_plat_sepolicy): PRIVATE_NEVERALLOW_ARG := $(NEVERALLOW_ARG) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1523 | $(built_plat_sepolicy): $(base_plat_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy \ |
| 1524 | $(HOST_OUT_EXECUTABLES)/secilc \ |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 1525 | $(call build_policy, $(sepolicy_build_cil_workaround_files), $(BASE_PLAT_PRIVATE_POLICY)) \ |
| 1526 | $(built_sepolicy_neverallows) |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1527 | @mkdir -p $(dir $@) |
| 1528 | $(hide) $(CHECKPOLICY_ASAN_OPTIONS) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -C -c \ |
| 1529 | $(POLICYVERS) -o $@ $< |
| 1530 | $(hide) cat $(PRIVATE_ADDITIONAL_CIL_FILES) >> $@ |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 1531 | $(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -c $(POLICYVERS) $(PRIVATE_NEVERALLOW_ARG) $@ -o $@ -f /dev/null |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1532 | |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1533 | all_fc_files := $(built_plat_fc) $(built_vendor_fc) |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 1534 | ifdef BOARD_ODM_SEPOLICY_DIRS |
| 1535 | all_fc_files += $(built_odm_fc) |
| 1536 | endif |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1537 | all_fc_args := $(foreach file, $(all_fc_files), -f $(file)) |
| 1538 | |
Tri Vo | 1406926 | 2018-01-31 16:22:35 -0800 | [diff] [blame] | 1539 | # Tests for Treble compatibility of current platform policy and vendor policy of |
| 1540 | # given release version. |
| 1541 | version_under_treble_tests := 26.0 |
| 1542 | include $(LOCAL_PATH)/treble_sepolicy_tests_for_release.mk |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1543 | |
Tri Vo | 9299d93 | 2018-01-31 16:50:28 -0800 | [diff] [blame] | 1544 | version_under_treble_tests := 27.0 |
| 1545 | include $(LOCAL_PATH)/treble_sepolicy_tests_for_release.mk |
| 1546 | |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1547 | BASE_PLAT_PUBLIC_POLICY := |
| 1548 | BASE_PLAT_PRIVATE_POLICY := |
| 1549 | base_plat_policy.conf := |
Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame] | 1550 | plat_sepolicy := |
| 1551 | |
Steven Moreland | 763697d | 2017-11-09 11:24:56 -0800 | [diff] [blame] | 1552 | endif # ($(PRODUCT_SEPOLICY_SPLIT),true) |
Jeff Vander Stoep | 1fc0682 | 2017-05-31 15:36:07 -0700 | [diff] [blame] | 1553 | ################################# |
rpcraig | 47cd396 | 2012-10-17 21:09:52 -0400 | [diff] [blame] | 1554 | |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 1555 | add_nl := |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1556 | build_vendor_policy := |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 1557 | build_odm_policy := |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 1558 | build_policy := |
dcashman | d225b69 | 2016-12-12 09:29:04 -0800 | [diff] [blame] | 1559 | built_plat_fc := |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1560 | built_vendor_fc := |
Bowgo Tsai | bae1517 | 2017-11-29 16:14:53 +0800 | [diff] [blame] | 1561 | built_odm_fc := |
Richard Haines | c8801fe | 2015-12-11 10:39:19 +0000 | [diff] [blame] | 1562 | built_nl := |
Alex Klyubin | 8f7173b | 2017-02-25 14:47:53 -0800 | [diff] [blame] | 1563 | built_plat_cil := |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1564 | built_plat_pub_vers_cil := |
Alex Klyubin | 8f7173b | 2017-02-25 14:47:53 -0800 | [diff] [blame] | 1565 | built_mapping_cil := |
Sandeep Patil | a86316e | 2016-12-27 16:08:44 -0800 | [diff] [blame] | 1566 | built_plat_pc := |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1567 | built_vendor_cil := |
| 1568 | built_vendor_pc := |
| 1569 | built_vendor_sc := |
Bowgo Tsai | 45457e3 | 2017-11-27 11:41:33 +0800 | [diff] [blame] | 1570 | built_odm_cil := |
Bowgo Tsai | 1f717b1 | 2017-11-29 16:15:55 +0800 | [diff] [blame^] | 1571 | built_odm_pc := |
Bowgo Tsai | ecf656b | 2017-11-29 16:15:28 +0800 | [diff] [blame] | 1572 | built_odm_sc := |
Dan Cashman | 9c03807 | 2016-12-22 07:15:18 -0800 | [diff] [blame] | 1573 | built_plat_sc := |
Alex Klyubin | 193dccd | 2017-03-07 14:05:57 -0800 | [diff] [blame] | 1574 | built_precompiled_sepolicy := |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 1575 | built_sepolicy := |
Joel Galenson | 5988b56 | 2018-01-03 16:53:24 -0800 | [diff] [blame] | 1576 | built_sepolicy_neverallows := |
Sandeep Patil | a058b56 | 2016-12-27 15:10:48 -0800 | [diff] [blame] | 1577 | built_plat_svc := |
Bowgo Tsai | afbcf21 | 2018-02-05 17:34:52 +0800 | [diff] [blame] | 1578 | built_vendor_svc := |
Jeff Vander Stoep | b878769 | 2017-04-21 15:57:07 -0700 | [diff] [blame] | 1579 | mapping_policy := |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 1580 | my_target_arch := |
dcashman | 1faa644 | 2016-11-28 07:20:28 -0800 | [diff] [blame] | 1581 | plat_pub_policy.cil := |
| 1582 | reqd_policy_mask.cil := |
Dan Cashman | 1c04027 | 2016-12-15 15:28:44 -0800 | [diff] [blame] | 1583 | sepolicy_build_files := |
Alex Klyubin | 7cda44f | 2017-03-21 14:28:53 -0700 | [diff] [blame] | 1584 | sepolicy_build_cil_workaround_files := |
Jeff Vander Stoep | 7443484 | 2017-03-13 12:22:15 -0700 | [diff] [blame] | 1585 | with_asan := |
Alice Chu | cdfb06f | 2012-11-01 11:33:04 -0700 | [diff] [blame] | 1586 | |
| 1587 | include $(call all-makefiles-under,$(LOCAL_PATH)) |