tequilaOS/platform_build
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Include secilc and sepolicy conditionally, elsewhere

Browse source 
This removes the unconditional inclusion of secilc and sepolicy.
These artefacts are now conditionally included by system/core/init.
The reason for declaring the conditional inclusion there is because
the desired conditional inclusion based on PRODUCT_FULL_TREBLE cannot
be declared here because PRODUCT_FULL_TREBLE is not yet available when
this file is interpreted.

Test: Device boots, no additional SELinux denials. This test is
      performed on a device with PRODUCT_FULL_TREBLE set to true, and
      on a device with PRODUCT_FULL_TREBLE set to false.
Test: Device with PRODUCT_FULL_TREBLE set to true contains secilc and
      the three *.cil files, but does not contain the sepolicy file.
      Device with PRODUCT_FULL_TREBLE set to false contains sepolicy
      file but does not contain the secilc file or any *.cil files.
Bug: 31363362

Change-Id: Ia3f38948b71a054918f5f63c594ba62a033e1066
This commit is contained in:
Alex Klyubin 2017-03-02 12:58:38 -08:00
parent afc0ea14d8
commit 8e87853a04
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
target/product/embedded.mk
View file

@ -84,7 +84,6 @@ PRODUCT_PACKAGES += \
# SELinux packages
PRODUCT_PACKAGES += \
secilc \
file_contexts.bin \
nonplat_file_contexts \
nonplat_mac_permissions.xml \
@ -96,8 +95,7 @@ PRODUCT_PACKAGES += \
plat_property_contexts \
plat_seapp_contexts \
plat_service_contexts \
selinux_version \
sepolicy
selinux_version
# AID Generation for
# <pwd.h> and <grp.h>