platform_build/core/app_certificate_validate.mk


ifeq (true,$(non_system_module))
  ifneq (,$(filter $(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))%,$(LOCAL_CERTIFICATE)))
    CERTIFICATE_VIOLATION_MODULES += $(LOCAL_MODULE)
    ifeq (true,$(PRODUCT_ENFORCE_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT))
      $(if $(filter $(LOCAL_MODULE),$(PRODUCT_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT_ALLOW_LIST)),,\
        $(call pretty-error,The module in product partition cannot be signed with certificate in system.))
    endif
  endif
endif
Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb 2018-12-17 06:45:15 +01:00
Define non-system module as variable Define non_system_module in base_rules.mk when the module is product, vendor, product_services or proprietary module. Bug: 74699609 Test: m -j Change-Id: Iebdd3ec8c643be3d9877b7a96cbdd83465fa3878 2019-01-18 07:09:09 +01:00			`ifeq (true,$(non_system_module))`
Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb 2018-12-17 06:45:15 +01:00			`ifneq (,$(filter $(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))%,$(LOCAL_CERTIFICATE)))`
			`CERTIFICATE_VIOLATION_MODULES += $(LOCAL_MODULE)`
Access PRODUCT_ variables directly This CL simplifies the PRODUCTS.$(INTERNAL_PRODUCT).X accesses of product variables, and removes unnecessary stripping of them. Replace: '\$\(PRODUCTS\.\$\(INTERNAL_PRODUCT\)\.([^\)])\)' with '$(\1)' Replace: '\$\(strip\s\$\(PRODUCT_([^\)]*)\)\)' with '$(PRODUCT_\1)' A few minor manual tweaks. Bug: 116769560 Test: presubmit Change-Id: I70c54f1582e3cc780028535960147d99ebc2e0e1 2019-03-28 16:45:40 +01:00			`ifeq (true,$(PRODUCT_ENFORCE_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT))`
Use inclusive language in build/make Test: m checkbuild Change-Id: I54a7e55d3fdd5571ef1ae33ebe443c10d138fd28 2020-06-11 20:25:05 +02:00			`$(if $(filter $(LOCAL_MODULE),$(PRODUCT_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT_ALLOW_LIST)),,\`
Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb 2018-12-17 06:45:15 +01:00			`$(call pretty-error,The module in product partition cannot be signed with certificate in system.))`
			`endif`
			`endif`
Access PRODUCT_ variables directly This CL simplifies the PRODUCTS.$(INTERNAL_PRODUCT).X accesses of product variables, and removes unnecessary stripping of them. Replace: '\$\(PRODUCTS\.\$\(INTERNAL_PRODUCT\)\.([^\)])\)' with '$(\1)' Replace: '\$\(strip\s\$\(PRODUCT_([^\)]*)\)\)' with '$(PRODUCT_\1)' A few minor manual tweaks. Bug: 116769560 Test: presubmit Change-Id: I70c54f1582e3cc780028535960147d99ebc2e0e1 2019-03-28 16:45:40 +01:00			`endif`