tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/mac_permissions.mk

176 lines
7.7 KiB
Makefile
Raw Normal View History

sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
include $(CLEAR_VARS)
LOCAL_MODULE := plat_mac_permissions.xml
[LSC] Add LOCAL_LICENSE_KINDS to system/sepolicy Added SPDX-license-identifier-Apache-2.0 to: build/Android.bp build/soong/Android.bp tests/Android.bp tools/Android.bp Added SPDX-license-identifier-Apache-2.0 legacy_unencumbered to: Android.bp Android.mk compat.mk contexts_tests.mk mac_permissions.mk seapp_contexts.mk treble_sepolicy_tests_for_release.mk Added legacy_unencumbered to: apex/Android.bp tools/sepolicy-analyze/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I1ab286543ef1bdcb494cf74f2b35e35a08225d28
2021-02-04 08:07:40 +01:00
LOCAL_LICENSE_KINDS := SPDX-license-identifier-Apache-2.0 legacy_unencumbered
LOCAL_LICENSE_CONDITIONS := notice unencumbered
LOCAL_NOTICE_FILE := $(LOCAL_PATH)/NOTICE
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
LOCAL_MODULE_CLASS := ETC
LOCAL_MODULE_TAGS := optional
LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/selinux
include $(BUILD_SYSTEM)/base_rules.mk
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
all_plat_mac_perms_keys := $(call build_policy, keys.conf, $(PLAT_PRIVATE_POLICY) $(SYSTEM_EXT_PRIVATE_POLICY) $(PRODUCT_PRIVATE_POLICY))
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_plat_mac_perms_files := $(call build_policy, mac_permissions.xml, $(PLAT_PRIVATE_POLICY))
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
# Build keys.conf
plat_mac_perms_keys.tmp := $(intermediates)/plat_keys.tmp
$(plat_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(plat_mac_perms_keys.tmp): PRIVATE_KEYS := $(all_plat_mac_perms_keys)
$(plat_mac_perms_keys.tmp): $(all_plat_mac_perms_keys) $(M4)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
@mkdir -p $(dir $@)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(hide) $(M4) --fatal-warnings -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_KEYS) > $@
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
# Should be synced with keys.conf.
Move sdk_sandbox sepolicy to AOSP. Bug: 224796470 Bug: 203670791 Bug: 204989872 Bug: 211761016 Bug: 217543371 Bug: 217559719 Bug: 215105355 Bug: 220320098 Test: make, ensure device boots Change-Id: Ia96ae5407f5a83390ce1b610da0d49264e90d7e2 Merged-In: Ib085c49f29dab47268e479fe5266490a66adaa87 Merged-In: I2215ffe74e0fa19ff936e90c08c4ebfd177e5258 Merged-In: I478c9a16032dc1f1286f5295fc080cbe574f09c9 Merged-In: Ibf478466e5d6ab0ee08fca4da3b4bae974a82db0 Merged-In: I5d519605d9fbe80c7b4c9fb6572bc72425f6e90a Merged-In: I05d2071e023d0de8a93dcd111674f8d8102a21ce Merged-In: I6572a7a5c46c52c9421d0e9c9fc653ddbd6de145 Merged-In: I1b6d1a778cb658bdfd930b684e4ba0640031b226 Merged-In: I9fb98e0caee75bdaaa35d11d174004505f236799
2022-03-15 18:28:02 +01:00
all_plat_keys := platform media networkstack sdk_sandbox shared testkey
Fix missing rename of all_keys -> all_plat_keys Bug: 130111713 Test: treehugger Change-Id: I38f7bd45bb2ec9cfef35384b23811cf6ec15cac2
2019-05-28 23:20:08 +02:00
all_plat_keys := $(all_plat_keys:%=$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))/%.x509.pem)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_plat_mac_perms_files)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(LOCAL_BUILT_MODULE): $(plat_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys \
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(all_plat_mac_perms_files) $(all_plat_keys)
@mkdir -p $(dir $@)
$(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \
Add MAINLINE_SEPOLICY_DEV_CERTIFICATES to keys.conf DEFAULT_SYSTEM_DEV_CERTIFICATE is not appropriate as some OEMs may need to change only the certificates used to generate plat_mac_permissions.xml for mainline modules. Test: m, checked output plat_mac_permissions.xml Bug: 138097611 Bug: 134995443 Change-Id: Ie19130a243db043f432039c54c379f06e60ab6c6
2019-08-07 11:23:47 +02:00
MAINLINE_SEPOLICY_DEV_CERTIFICATES="$(MAINLINE_SEPOLICY_DEV_CERTIFICATES)" \
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(HOST_OUT_EXECUTABLES)/insertkeys -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
all_plat_keys :=
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_plat_mac_perms_files :=
all_plat_mac_perms_keys :=
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
plat_mac_perms_keys.tmp :=
##################################
include $(CLEAR_VARS)
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
LOCAL_MODULE := system_ext_mac_permissions.xml
[LSC] Add LOCAL_LICENSE_KINDS to system/sepolicy Added SPDX-license-identifier-Apache-2.0 to: build/Android.bp build/soong/Android.bp tests/Android.bp tools/Android.bp Added SPDX-license-identifier-Apache-2.0 legacy_unencumbered to: Android.bp Android.mk compat.mk contexts_tests.mk mac_permissions.mk seapp_contexts.mk treble_sepolicy_tests_for_release.mk Added legacy_unencumbered to: apex/Android.bp tools/sepolicy-analyze/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I1ab286543ef1bdcb494cf74f2b35e35a08225d28
2021-02-04 08:07:40 +01:00
LOCAL_LICENSE_KINDS := SPDX-license-identifier-Apache-2.0 legacy_unencumbered
LOCAL_LICENSE_CONDITIONS := notice unencumbered
LOCAL_NOTICE_FILE := $(LOCAL_PATH)/NOTICE
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
LOCAL_MODULE_CLASS := ETC
LOCAL_MODULE_TAGS := optional
LOCAL_MODULE_PATH := $(TARGET_OUT_SYSTEM_EXT)/etc/selinux
include $(BUILD_SYSTEM)/base_rules.mk
all_system_ext_mac_perms_keys := $(call build_policy, keys.conf, $(SYSTEM_EXT_PRIVATE_POLICY) $(REQD_MASK_POLICY))
all_system_ext_mac_perms_files := $(call build_policy, mac_permissions.xml, $(SYSTEM_EXT_PRIVATE_POLICY) $(REQD_MASK_POLICY))
# Build keys.conf
system_ext_mac_perms_keys.tmp := $(intermediates)/system_ext_keys.tmp
$(system_ext_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
$(system_ext_mac_perms_keys.tmp): PRIVATE_KEYS := $(all_system_ext_mac_perms_keys)
Add dependencies on M4 Most of the users already added dependencies when it was used, but a couple didn't. These broken when I converted $(M4) into a built artifact, as the artifact wasn't created before use. Test: treehugger Change-Id: Ic5c18131de84747e8b96413f61993fa777cb9d2c
2020-07-24 02:59:38 +02:00
$(system_ext_mac_perms_keys.tmp): $(all_system_ext_mac_perms_keys) $(M4)
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
@mkdir -p $(dir $@)
Add dependencies on M4 Most of the users already added dependencies when it was used, but a couple didn't. These broken when I converted $(M4) into a built artifact, as the artifact wasn't created before use. Test: treehugger Change-Id: Ic5c18131de84747e8b96413f61993fa777cb9d2c
2020-07-24 02:59:38 +02:00
$(hide) $(M4) --fatal-warnings -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_KEYS) > $@
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_system_ext_mac_perms_files)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(LOCAL_BUILT_MODULE): $(system_ext_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys \
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
$(all_system_ext_mac_perms_files)
@mkdir -p $(dir $@)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(hide) $(HOST_OUT_EXECUTABLES)/insertkeys -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
Separate system_ext_mac_permissions.xml out of system sepolicy. Bug: 137712473 Test: boot crosshatch Test: Moving product sepolicy to system_ext and checks the file contents in /system_ext/etc/selinux are identical to previous contents in /product/etc/selinux. Change-Id: I434e7f23a1ae7d01d084335783255330329c44e9
2019-09-09 16:05:49 +02:00
system_ext_mac_perms_keys.tmp :=
all_system_ext_mac_perms_files :=
all_system_ext_mac_perms_keys :=
##################################
include $(CLEAR_VARS)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
LOCAL_MODULE := product_mac_permissions.xml
[LSC] Add LOCAL_LICENSE_KINDS to system/sepolicy Added SPDX-license-identifier-Apache-2.0 to: build/Android.bp build/soong/Android.bp tests/Android.bp tools/Android.bp Added SPDX-license-identifier-Apache-2.0 legacy_unencumbered to: Android.bp Android.mk compat.mk contexts_tests.mk mac_permissions.mk seapp_contexts.mk treble_sepolicy_tests_for_release.mk Added legacy_unencumbered to: apex/Android.bp tools/sepolicy-analyze/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I1ab286543ef1bdcb494cf74f2b35e35a08225d28
2021-02-04 08:07:40 +01:00
LOCAL_LICENSE_KINDS := SPDX-license-identifier-Apache-2.0 legacy_unencumbered
LOCAL_LICENSE_CONDITIONS := notice unencumbered
LOCAL_NOTICE_FILE := $(LOCAL_PATH)/NOTICE
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
LOCAL_MODULE_CLASS := ETC
LOCAL_MODULE_TAGS := optional
LOCAL_MODULE_PATH := $(TARGET_OUT_PRODUCT)/etc/selinux
include $(BUILD_SYSTEM)/base_rules.mk
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_product_mac_perms_keys := $(call build_policy, keys.conf, $(PRODUCT_PRIVATE_POLICY) $(REQD_MASK_POLICY))
all_product_mac_perms_files := $(call build_policy, mac_permissions.xml, $(PRODUCT_PRIVATE_POLICY) $(REQD_MASK_POLICY))
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
# Build keys.conf
product_mac_perms_keys.tmp := $(intermediates)/product_keys.tmp
$(product_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(product_mac_perms_keys.tmp): PRIVATE_KEYS := $(all_product_mac_perms_keys)
Add dependencies on M4 Most of the users already added dependencies when it was used, but a couple didn't. These broken when I converted $(M4) into a built artifact, as the artifact wasn't created before use. Test: treehugger Change-Id: Ic5c18131de84747e8b96413f61993fa777cb9d2c
2020-07-24 02:59:38 +02:00
$(product_mac_perms_keys.tmp): $(all_product_mac_perms_keys) $(M4)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
@mkdir -p $(dir $@)
Add dependencies on M4 Most of the users already added dependencies when it was used, but a couple didn't. These broken when I converted $(M4) into a built artifact, as the artifact wasn't created before use. Test: treehugger Change-Id: Ic5c18131de84747e8b96413f61993fa777cb9d2c
2020-07-24 02:59:38 +02:00
$(hide) $(M4) --fatal-warnings -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_KEYS) > $@
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_product_mac_perms_files)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(LOCAL_BUILT_MODULE): $(product_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys \
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(all_product_mac_perms_files)
@mkdir -p $(dir $@)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(hide) $(HOST_OUT_EXECUTABLES)/insertkeys -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
product_mac_perms_keys.tmp :=
all_product_mac_perms_files :=
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_product_mac_perms_keys :=
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
##################################
include $(CLEAR_VARS)
LOCAL_MODULE := vendor_mac_permissions.xml
[LSC] Add LOCAL_LICENSE_KINDS to system/sepolicy Added SPDX-license-identifier-Apache-2.0 to: build/Android.bp build/soong/Android.bp tests/Android.bp tools/Android.bp Added SPDX-license-identifier-Apache-2.0 legacy_unencumbered to: Android.bp Android.mk compat.mk contexts_tests.mk mac_permissions.mk seapp_contexts.mk treble_sepolicy_tests_for_release.mk Added legacy_unencumbered to: apex/Android.bp tools/sepolicy-analyze/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I1ab286543ef1bdcb494cf74f2b35e35a08225d28
2021-02-04 08:07:40 +01:00
LOCAL_LICENSE_KINDS := SPDX-license-identifier-Apache-2.0 legacy_unencumbered
LOCAL_LICENSE_CONDITIONS := notice unencumbered
LOCAL_NOTICE_FILE := $(LOCAL_PATH)/NOTICE
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
LOCAL_MODULE_CLASS := ETC
LOCAL_MODULE_TAGS := optional
LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR)/etc/selinux
include $(BUILD_SYSTEM)/base_rules.mk
Fix vendor contexts files in mixed build BOARD_PLAT_VENDOR_POLICY should be used for all vendor stuff, when in mixed sepolicy build (BOARD_SEPOLICY_VERS != PLATFORM_SEPOLICY_VERSION). This fixes an issue that system/sepolicy/vendor has been incorrectly used in mixed sepolicy build. Bug: 205924657 Test: Try AOSP + rvc-dev mixed sepolicy build 1) copy cuttlefish sepolicy prebuilts from rvc-dev branch. 2) set prebuilt variables: - BOARD_PLAT_VENDOR_POLICY - BOARD_REQD_MASK_POLICY - BOARD_(SYSTEM_EXT|PRODUCT)_PRIVATE_PREBUILT_DIRS - BOARD_SEPOLICY_VERS 3) lunch aosp_cf_x86_64_phone-userdebug; m selinux_policy 4) compare $OUT/vendor/etc/selinux with rvc-dev's artifacts. Change-Id: I2ed1e25255c825c24dab99ae4903328b0400c414
2021-12-08 14:45:58 +01:00
all_vendor_mac_perms_keys := $(call build_policy, keys.conf, $(BOARD_PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(BOARD_REQD_MASK_POLICY))
all_vendor_mac_perms_files := $(call build_policy, mac_permissions.xml, $(BOARD_PLAT_VENDOR_POLICY) $(BOARD_VENDOR_SEPOLICY_DIRS) $(BOARD_REQD_MASK_POLICY))
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
# Build keys.conf
vendor_mac_perms_keys.tmp := $(intermediates)/vendor_keys.tmp
$(vendor_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(vendor_mac_perms_keys.tmp): PRIVATE_KEYS := $(all_vendor_mac_perms_keys)
$(vendor_mac_perms_keys.tmp): $(all_vendor_mac_perms_keys) $(M4)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
@mkdir -p $(dir $@)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(hide) $(M4) --fatal-warnings -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_KEYS) > $@
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_vendor_mac_perms_files)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(LOCAL_BUILT_MODULE): $(vendor_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys \
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(all_vendor_mac_perms_files)
@mkdir -p $(dir $@)
Copying platform seinfo into vendor partition Some vendor apps are using platform key for signing. This moves them to untrusted_app domain when the system partition is switched to a Generic System Image (GSI), because the value of platform's seinfo in /system/etc/selinux/plat_mac_permissions.xml has been changed. Duplicating the device-specific platform seinfo into /vendor/etc/selinux/vendor_mac_permissions.xml to make it self-contained within the vendor partition. Bug: 157141777 Test: boot the device with a GSI, then `adb shell ps -eZ | grep qtidata` Test: ./build/make/tools/releasetools/sign_target_files_apks \ --default_key_mappings path/to/keydir \ -o out/dist/<lunch>-target_files-*.zip \ signed-tardis-target_files.zip and checks the platform seinfo in /vendor/etc/selinux/vendor_mac_permissions.xml is replaced. Change-Id: Ic9a79780e30f456138e4de67210cc60ac2e490d6 Merged-In: Ic9a79780e30f456138e4de67210cc60ac2e490d6 (cherry picked from commit 8a86424e3404cef78810c40f88fd7683a9182952)
2020-06-02 16:16:12 +02:00
$(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(HOST_OUT_EXECUTABLES)/insertkeys -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
vendor_mac_perms_keys.tmp :=
all_vendor_mac_perms_files :=
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_vendor_mac_perms_keys :=
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
##################################
include $(CLEAR_VARS)
LOCAL_MODULE := odm_mac_permissions.xml
[LSC] Add LOCAL_LICENSE_KINDS to system/sepolicy Added SPDX-license-identifier-Apache-2.0 to: build/Android.bp build/soong/Android.bp tests/Android.bp tools/Android.bp Added SPDX-license-identifier-Apache-2.0 legacy_unencumbered to: Android.bp Android.mk compat.mk contexts_tests.mk mac_permissions.mk seapp_contexts.mk treble_sepolicy_tests_for_release.mk Added legacy_unencumbered to: apex/Android.bp tools/sepolicy-analyze/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I1ab286543ef1bdcb494cf74f2b35e35a08225d28
2021-02-04 08:07:40 +01:00
LOCAL_LICENSE_KINDS := SPDX-license-identifier-Apache-2.0 legacy_unencumbered
LOCAL_LICENSE_CONDITIONS := notice unencumbered
LOCAL_NOTICE_FILE := $(LOCAL_PATH)/NOTICE
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
LOCAL_MODULE_CLASS := ETC
LOCAL_MODULE_TAGS := optional
LOCAL_MODULE_PATH := $(TARGET_OUT_ODM)/etc/selinux
include $(BUILD_SYSTEM)/base_rules.mk
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
all_odm_mac_perms_keys := $(call build_policy, keys.conf, $(BOARD_ODM_SEPOLICY_DIRS) $(REQD_MASK_POLICY))
all_odm_mac_perms_files := $(call build_policy, mac_permissions.xml, $(BOARD_ODM_SEPOLICY_DIRS) $(REQD_MASK_POLICY))
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
# Build keys.conf
odm_mac_perms_keys.tmp := $(intermediates)/odm_keys.tmp
$(odm_mac_perms_keys.tmp): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(odm_mac_perms_keys.tmp): PRIVATE_KEYS := $(all_odm_mac_perms_keys)
$(odm_mac_perms_keys.tmp): $(all_odm_mac_perms_keys) $(M4)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
@mkdir -p $(dir $@)
Use prebuilt m4 instead of system m4 Bug: 117561006 Test: treehugger Change-Id: Id794aed10fdffef10490561d2cfeb2a92801b331
2019-06-19 19:52:50 +02:00
$(hide) $(M4) --fatal-warnings -s $(PRIVATE_ADDITIONAL_M4DEFS) $(PRIVATE_KEYS) > $@
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(LOCAL_BUILT_MODULE): PRIVATE_MAC_PERMS_FILES := $(all_odm_mac_perms_files)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(LOCAL_BUILT_MODULE): $(odm_mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys \
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
$(all_odm_mac_perms_files)
@mkdir -p $(dir $@)
Migrate insertkeys.py to Python3 PEM files are ASCII-encoded, open them as text file (as opposed to binary). Avoid relying on __del__. Introduce a prologue and epilogue methods to emit the <policy> tag only once per output. Test: build plat_mac_permissions.xml on bramble and compare with previous version; identical Test: build product_mac_permissions.xml on bramble and compare with previous version; identical Test: build system_ext_mac_permissions.xml on bramble and compare with previous version; identical Test: build vendor_mac_permissions.xml on bramble and compare with previous version; identical Bug: 200119288 Change-Id: Iced0acf75bff756453918a411aecb9f4ef8f825d
2021-12-03 03:38:04 +01:00
$(hide) $(HOST_OUT_EXECUTABLES)/insertkeys -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(PRIVATE_MAC_PERMS_FILES)
sepolicy: refactor Android.mk system/sepolicy/Android.mk has become too large (~2k lines) and hard to navigate. This patch reorganizes build rules for convenience. No functional changes are made. Test: m selinux_policy Change-Id: I9a022b223b2387a4475da6d8209d561bfea228fb
2019-01-08 01:43:31 +01:00
odm_mac_perms_keys.tmp :=
all_odm_mac_perms_files :=
Reference in a new issue Copy permalink