platform_system_sepolicy/tools/finalize-sdk-rel.sh

96 lines
2.8 KiB
Bash
Raw Normal View History

#!/bin/bash
# Copyright (C) 2023 The Android Open Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
if [ $# -ne 2 ]; then
echo "Usage: $0 <top> <ver>"
exit 1
fi
top=$1
ver=$2
mkdir -p "$top/system/sepolicy/prebuilts/api/${ver}.0/"
cp -r "$top/system/sepolicy/public/" "$top/system/sepolicy/prebuilts/api/${ver}.0/"
cp -r "$top/system/sepolicy/private/" "$top/system/sepolicy/prebuilts/api/${ver}.0/"
cat > "$top/system/sepolicy/prebuilts/api/${ver}.0/Android.bp" <<EOF
// Automatically generated file, do not edit!
se_policy_conf {
name: "${ver}.0_plat_pub_policy.conf",
srcs: [":se_build_files{.plat_public_${ver}.0}", ":se_build_files{.reqd_mask}"],
installable: false,
build_variant: "user",
}
se_policy_cil {
name: "${ver}.0_plat_pub_policy.cil",
src: ":${ver}.0_plat_pub_policy.conf",
filter_out: [":reqd_policy_mask.cil"],
secilc_check: false,
installable: false,
}
se_policy_conf {
name: "${ver}.0_product_pub_policy.conf",
srcs: [
":se_build_files{.plat_public_${ver}.0}",
":se_build_files{.system_ext_public_${ver}.0}",
":se_build_files{.product_public_${ver}.0}",
":se_build_files{.reqd_mask}",
],
installable: false,
build_variant: "user",
}
se_policy_cil {
name: "${ver}.0_product_pub_policy.cil",
src: ":${ver}.0_product_pub_policy.conf",
filter_out: [":reqd_policy_mask.cil"],
secilc_check: false,
installable: false,
}
se_policy_conf {
name: "${ver}.0_plat_policy.conf",
srcs: [
":se_build_files{.plat_public_${ver}.0}",
":se_build_files{.plat_private_${ver}.0}",
":se_build_files{.system_ext_public_${ver}.0}",
":se_build_files{.system_ext_private_${ver}.0}",
":se_build_files{.product_public_${ver}.0}",
":se_build_files{.product_private_${ver}.0}",
],
installable: false,
build_variant: "user",
}
se_policy_cil {
name: "${ver}.0_plat_policy.cil",
src: ":${ver}.0_plat_policy.conf",
additional_cil_files: [":sepolicy_technical_debt{.plat_private_${ver}.0}"],
installable: false,
}
se_policy_binary {
name: "${ver}.0_plat_policy",
srcs: [":${ver}.0_plat_policy.cil"],
installable: false,
dist: {
targets: ["base-sepolicy-files-for-mapping"],
},
}
EOF