2a2a97afba
These restrictions enable macros that disable sepolicy access to debugfs for unauthorized clients on S-launching devices. However, since the Android S GSI build must also be fully functional on earlier devices that could have possibly depended on debugfs, disable the build-time restrictions on GSI builds. Bug: 184381659 Test: make Change-Id: I583693df5c30d9bab28f76a6c1e4e9db8e5fd89f
73 lines
2.5 KiB
Makefile
73 lines
2.5 KiB
Makefile
#
|
|
# Copyright (C) 2019 The Android Open-Source Project
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
#
|
|
# The makefile contains the special settings for GSI releasing.
|
|
# This makefile is used for the build targets which used for releasing GSI.
|
|
#
|
|
# For example:
|
|
# - Released GSI contains skip_mount.cfg to skip mounting prodcut paritition
|
|
# - Released GSI contains more VNDK packages to support old version vendors
|
|
# - etc.
|
|
#
|
|
|
|
BUILDING_GSI := true
|
|
|
|
# Exclude all files under system/product and system/system_ext
|
|
PRODUCT_ARTIFACT_PATH_REQUIREMENT_ALLOWED_LIST += \
|
|
system/product/% \
|
|
system/system_ext/%
|
|
|
|
# GSI should always support up-to-date platform features.
|
|
# Keep this value at the latest API level to ensure latest build system
|
|
# default configs are applied.
|
|
PRODUCT_SHIPPING_API_LEVEL := 30
|
|
|
|
# Enable dynamic partitions to facilitate mixing onto Cuttlefish
|
|
PRODUCT_USE_DYNAMIC_PARTITIONS := true
|
|
|
|
# Enable dynamic partition size
|
|
PRODUCT_USE_DYNAMIC_PARTITION_SIZE := true
|
|
|
|
# Disable the build-time debugfs restrictions on GSI builds
|
|
PRODUCT_SET_DEBUGFS_RESTRICTIONS := false
|
|
|
|
# GSI targets should install "unflattened" APEXes in /system
|
|
TARGET_FLATTEN_APEX := false
|
|
|
|
# GSI targets should install "flattened" APEXes in /system_ext as well
|
|
PRODUCT_INSTALL_EXTRA_FLATTENED_APEXES := true
|
|
|
|
# The flattened version of com.android.apex.cts.shim.v1 should be explicitly installed
|
|
# because the shim apex is prebuilt one and PRODUCT_INSTALL_EXTRA_FLATTENED_APEXES is not
|
|
# supported for prebuilt_apex modules yet.
|
|
PRODUCT_PACKAGES += com.android.apex.cts.shim.v1_with_prebuilts.flattened
|
|
|
|
# GSI specific tasks on boot
|
|
PRODUCT_PACKAGES += \
|
|
gsi_skip_mount.cfg \
|
|
init.gsi.rc \
|
|
init.vndk-nodef.rc \
|
|
|
|
# Support additional P, Q and R VNDK packages
|
|
PRODUCT_EXTRA_VNDK_VERSIONS := 28 29 30
|
|
|
|
# Do not build non-GSI partition images.
|
|
PRODUCT_BUILD_CACHE_IMAGE := false
|
|
PRODUCT_BUILD_USERDATA_IMAGE := false
|
|
PRODUCT_BUILD_VENDOR_IMAGE := false
|
|
PRODUCT_BUILD_SUPER_PARTITION := false
|
|
PRODUCT_BUILD_SUPER_EMPTY_IMAGE := false
|