tequilaOS/platform_system_sepolicy - gitownia.eu

tequilaOS/platform_system_sepolicy

2 lines

29 B

Text

Raw Normal View History

Add 32.0 mapping files Steps taken to produce the mapping files: 1. Add prebuilts/api/32.0/plat_pub_versioned.cil from the /vendor/etc/selinux/plat_pub_versioned.cil file built on sc-v2-dev with lunch target aosp_arm64-eng. Add prebuilts/api/32.0/vendor_sepolicy.cil as an empty file. When adding plat_pub_versioned.cil, leave only type and typeattribute statements, removing the other statements: allow, neverallow, role, etc. 2. Add new file private/compat/32.0/32.0.cil by doing the following: - copy /system/etc/selinux/mapping/32.0.cil from sc-v2-dev aosp_arm64-eng device to private/compat/32.0/32.0.cil - remove all attribute declaration statement (typeattribute ...) and sort lines alphabetically - some selinux types were added/renamed/deleted w.r.t 32 sepolicy. Find all such types using treble_sepolicy_tests_32.0 test. - for all these types figure out where to map them by looking at 31.0.[ignore.]cil files and add approprite entries to 32.0.[ignore.]cil. This change also enables treble_sepolicy_tests_32.0 and installs 32.0.cil mapping file onto the device. Bug: 206330997 Test: m treble_sepolicy_tests_32.0 Test: m 32.0_compat_test Test: m selinux_policy Change-Id: I8b2991e64e2f531ce12db7aaacad955e4e8ed687

2021-11-30 06:58:10 +01:00

;; This file can't be empty.