No description
Find a file
Logan Chien 122c68c862 Mark libselinux as VNDK in Android.bp
This commit marks libselinux.so as VNDK, so that vendor variant of
libselinux.so can be installed into /system/lib[64]/vndk instead of
/vendor/lib[64].  This makes it easier to apply security patches
through system-only OTAs.

Before this commit, libselinux was not an VNDK library because there
was a concern with selabel database file format.  This is no longer a
concern because the file backend is disabled in vendor variant.

Bug: 69587962
Bug: 63866913
Test: /system/lib64/vndk/libselinux.so shows up in GSI
Change-Id: I9d3be760bb5b3f8bf50b96ce6d8b938bf75c620a
2017-11-22 10:22:40 +08:00
checkpolicy Use -Werror in external/selinux 2017-10-04 00:59:43 +00:00
dbus Update VERSION files for 2.7 release. 2017-08-04 09:31:00 -04:00
gui gui: remove mappingsPage 2017-10-02 01:51:49 +08:00
libselinux Mark libselinux as VNDK in Android.bp 2017-11-22 10:22:40 +08:00
libsemanage libsemanage: Add support for listing fcontext.homedirs file 2017-10-04 14:18:58 -04:00
libsepol Merge "libsepol: cil: Keep type[attribute] declarations when attributizing." 2017-10-13 20:45:09 +00:00
mcstrans Update VERSION files for 2.7 release. 2017-08-04 09:31:00 -04:00
policycoreutils checkpolicy,libselinux,libsepol,policycoreutils: Update my email address 2017-08-17 14:17:12 -04:00
prebuilts/bin Improve selinux utils wrappers 2017-06-23 09:08:33 -07:00
python Merge remote-tracking branch 'aosp/upstream-master' into mymerge 2017-10-09 09:11:41 -07:00
restorecond restorecond: check write() and daemon() results 2017-09-05 12:37:29 -04:00
sandbox Update VERSION files for 2.7 release. 2017-08-04 09:31:00 -04:00
scripts Fix release script 2016-11-16 11:19:51 -05:00
secilc Merge remote-tracking branch 'aosp/upstream-master' into mymerge 2017-09-19 14:25:41 -07:00
semodule-utils Update VERSION files for 2.7 release. 2017-08-04 09:31:00 -04:00
.gitignore restorecond: Add gitignore 2016-11-16 11:20:05 -05:00
.travis.yml Travis-CI: fix configuration after September's update 2017-09-25 12:56:02 -04:00
Android.bp secilc: Migrate to soong 2017-05-09 16:18:42 +00:00
Android.mk sefcontext_compile: migrate to soong 2017-05-11 17:27:49 +00:00
CleanSpec.mk Mark libselinux as VNDK in Android.bp 2017-11-22 10:22:40 +08:00
Makefile Makefile: define a default value for CFLAGS 2017-09-05 12:37:41 -04:00
MODULE_LICENSE_GPL Add MODULE_LICENSE_GPL 2015-05-14 14:54:21 -07:00
NOTICE Add NOTICE 2015-05-22 11:20:50 -07:00
OWNERS Add OWNERS in external/selinux 2017-06-22 12:17:12 -07:00
README libsepol compilation fixes for macOS. 2017-01-20 13:19:57 -05:00
README.android libselinux: add The Android fork files 2016-10-24 11:05:25 -07:00

Please submit all bug reports and patches to selinux@tycho.nsa.gov.
Subscribe via selinux-join@tycho.nsa.gov.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig xmlto redhat-rpm-config

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.

To install libsepol on macOS (mainly for policy analysis):
cd libsepol; make DESTDIR=/usr/local PREFIX=/usr/local install

This requires GNU coreutils (brew install coreutils).