blob: 5117fabaca356cc71fe5f82ee039d9019186e1a2 [file] [log] [blame]
Inseob Kim085f22f2023-11-09 11:13:01 +09001// Copyright (C) 2023 The Android Open Source Project
2//
3// Licensed under the Apache License, Version 2.0 (the "License");
4// you may not use this file except in compliance with the License.
5// You may obtain a copy of the License at
6//
7// http://www.apache.org/licenses/LICENSE-2.0
8//
9// Unless required by applicable law or agreed to in writing, software
10// distributed under the License is distributed on an "AS IS" BASIS,
11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12// See the License for the specific language governing permissions and
13// limitations under the License.
14
Inseob Kimbf7f4a42024-02-14 13:53:39 +090015// This module contains a list of build time flags (defined on AOSP) for sepolicy.
16// Additional se_flags modules can be added anywhere for additional flags.
17se_flags {
18 name: "aosp_selinux_flags",
Chienyuan Huang2e19c762023-12-03 07:39:48 +000019 flags: [
Jeongik Chaf09f43c2024-04-02 14:50:14 +090020 "RELEASE_AVF_SUPPORT_CUSTOM_VM_WITH_PARAVIRTUALIZED_DEVICES",
Inseob Kim9c0d7122024-07-22 18:04:18 +090021 "RELEASE_AVF_ENABLE_EARLY_VM",
Chienyuan Huang2e19c762023-12-03 07:39:48 +000022 "RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT",
Alan Stokes38131e72024-02-20 11:06:37 +000023 "RELEASE_AVF_ENABLE_LLPVM_CHANGES",
Seungjae Yoof60a1e02024-05-20 14:15:22 +090024 "RELEASE_AVF_ENABLE_NETWORK",
Ted Bauereaeb65f2024-07-01 19:36:21 +000025 "RELEASE_READ_FROM_NEW_STORAGE",
Chienyuan Huang2e19c762023-12-03 07:39:48 +000026 "RELEASE_HARDWARE_BLUETOOTH_RANGING_SERVICE",
Ellen Arteca27b515e2024-04-30 20:26:55 +000027 "RELEASE_UNLOCKED_STORAGE_API",
Chienyuan Huang2e19c762023-12-03 07:39:48 +000028 ],
Inseob Kimbf7f4a42024-02-14 13:53:39 +090029 export_to: ["all_selinux_flags"],
30}
31
32// se_flags_collector collects flags from exported se_flags modules and converts it to build flags.
33se_flags_collector {
34 name: "all_selinux_flags",
35}
36
37se_policy_conf_defaults {
38 name: "se_policy_conf_flags_defaults",
39 srcs: [":sepolicy_flagging_macros"],
40 build_flags: ["all_selinux_flags"],
Inseob Kim085f22f2023-11-09 11:13:01 +090041}
42
Inseob Kim8697fc82024-04-16 14:45:32 +090043se_policy_conf_defaults {
44 name: "se_policy_conf_public_flags_defaults",
45 srcs: [":sepolicy_flagging_macros"],
46 build_flags: ["all_selinux_flags"],
Inseob Kim007f0ae2024-07-18 10:29:52 +090047 board_api_level: "vendor",
Inseob Kim8697fc82024-04-16 14:45:32 +090048}
49
Inseob Kim085f22f2023-11-09 11:13:01 +090050contexts_defaults {
51 name: "contexts_flags_defaults",
52 srcs: [":sepolicy_flagging_macros"],
53 neverallow_files: [":sepolicy_flagging_macros"], // for seapp_contexts
Inseob Kimbf7f4a42024-02-14 13:53:39 +090054 build_flags: ["all_selinux_flags"],
Inseob Kim085f22f2023-11-09 11:13:01 +090055}
56
57filegroup {
58 name: "sepolicy_flagging_macros",
Inseob Kim113f4d62024-07-18 11:29:51 +090059 srcs: ["flagging_macros"],
Inseob Kim085f22f2023-11-09 11:13:01 +090060}