tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add BOARD_SEPOLICY_IGNORE

Browse source 
See README for further details.

Change-Id: I4599c7ecd5a552e38de89d0a9e496e047068fe05
This commit is contained in:
William Roberts 2013-02-12 13:30:47 +09:00 committed by Gerrit Code Review
parent acea73d5dc
commit 15b3ceda5c
2 changed files with 33 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
Android.mk
View file

@ -25,7 +25,8 @@ $(foreach pf, $(BOARD_SEPOLICY_REPLACE), \
$(error Ambiguous request for sepolicy $(pf). Appears in both \ $(error Ambiguous request for sepolicy $(pf). Appears in both \
BOARD_SEPOLICY_REPLACE and BOARD_SEPOLICY_UNION), \ BOARD_SEPOLICY_REPLACE and BOARD_SEPOLICY_UNION), \
) \ ) \
$(eval _paths := $(wildcard $(addsuffix /$(pf), $(BOARD_SEPOLICY_DIRS)))) \ $(eval _paths := $(filter-out $(BOARD_SEPOLICY_IGNORE), \
$(wildcard $(addsuffix /$(pf), $(BOARD_SEPOLICY_DIRS))))) \
$(eval _occurrences := $(words $(_paths))) \ $(eval _occurrences := $(words $(_paths))) \
$(if $(filter 0,$(_occurrences)), \ $(if $(filter 0,$(_occurrences)), \
$(error No sepolicy file found for $(pf) in $(BOARD_SEPOLICY_DIRS)), \ $(error No sepolicy file found for $(pf) in $(BOARD_SEPOLICY_DIRS)), \
@ -45,15 +46,17 @@ $(foreach pf, $(BOARD_SEPOLICY_REPLACE), \
# product variables. # product variables.
# $(1): the set of policy name paths to build # $(1): the set of policy name paths to build
build_policy = $(foreach type, $(1), \ build_policy = $(foreach type, $(1), \
$(foreach expanded_type, $(notdir $(wildcard $(addsuffix /$(type), $(LOCAL_PATH)))), \ $(filter-out $(BOARD_SEPOLICY_IGNORE), \
$(if $(filter $(expanded_type), $(BOARD_SEPOLICY_REPLACE)), \ $(foreach expanded_type, $(notdir $(wildcard $(addsuffix /$(type), $(LOCAL_PATH)))), \
$(wildcard $(addsuffix $(expanded_type), $(sort $(dir $(sepolicy_replace_paths))))), \ $(if $(filter $(expanded_type), $(BOARD_SEPOLICY_REPLACE)), \
$(LOCAL_PATH)/$(expanded_type) \ $(wildcard $(addsuffix $(expanded_type), $(sort $(dir $(sepolicy_replace_paths))))), \
$(LOCAL_PATH)/$(expanded_type) \
) \
) \ ) \
) \ $(foreach union_policy, $(wildcard $(addsuffix /$(type), $(BOARD_SEPOLICY_DIRS))), \
$(foreach union_policy, $(wildcard $(addsuffix /$(type), $(BOARD_SEPOLICY_DIRS))), \ $(if $(filter $(notdir $(union_policy)), $(BOARD_SEPOLICY_UNION)), \
$(if $(filter $(notdir $(union_policy)), $(BOARD_SEPOLICY_UNION)), \ $(union_policy), \
$(union_policy), \ ) \
) \ ) \
) \ ) \
) )

23
README
View file

@ -8,6 +8,7 @@ they are:
1. BOARD_SEPOLICY_REPLACE 1. BOARD_SEPOLICY_REPLACE
2. BOARD_SEPOLICY_UNION 2. BOARD_SEPOLICY_UNION
3. BOARD_SEPOLICY_DIRS 3. BOARD_SEPOLICY_DIRS
4. BOARD_SEPOLICY_IGNORE
The variables should be set in the BoardConfig.mk file in The variables should be set in the BoardConfig.mk file in
the device or vendor directories. the device or vendor directories.
@ -38,7 +39,9 @@ multiple times on the policy search path defined by BOARD_SEPOLICY_DIRS.
eg.) if you specify shell.te in BOARD_SEPOLICY_REPLACE and eg.) if you specify shell.te in BOARD_SEPOLICY_REPLACE and
BOARD_SEPOLICY_DIRS is set to BOARD_SEPOLICY_DIRS is set to
"vendor/widget/common/sepolicy device/widget/x/sepolicy" and shell.te "vendor/widget/common/sepolicy device/widget/x/sepolicy" and shell.te
appears in both locations, it is an error. appears in both locations, it is an error. Unless it is in
BOARD_SEPOLICY_IGNORE to be filtered out. See BOARD_SEPOLICY_IGNORE
for more details.
It is an error to specify the same file name in both It is an error to specify the same file name in both
BOARD_POLICY_REPLACE and BOARD_POLICY_UNION. BOARD_POLICY_REPLACE and BOARD_POLICY_UNION.
@ -46,7 +49,23 @@ BOARD_POLICY_REPLACE and BOARD_POLICY_UNION.
It is an error to specify a BOARD_SEPOLICY_DIRS that has no entries when It is an error to specify a BOARD_SEPOLICY_DIRS that has no entries when
specifying BOARD_SEPOLICY_REPLACE. specifying BOARD_SEPOLICY_REPLACE.
Example Usage: BOARD_SEPOLICY_IGNORE is a list of paths (directory + filename) of
files that are not to be included in the resulting policy. This list
is passed to filter-out to remove any paths you may want to ignore. This
is useful if you have numerous config directories that contain a file
and you want to NOT include a particular file in your resulting
policy file, either by UNION or REPLACE.
Eg.) Suppose the follwoing:
BOARD_SEPOLICY_DIRS := X Y
BOARD_SEPOLICY_REPLACE := A
BOARD_SEPOLICY_IGNORE := X/A
Directories X and Y contain A.
The resulting policy is created by using Y/A only, thus X/A was
ignored.
Example BoardConfig.mk Usage:
From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk
BOARD_SEPOLICY_DIRS := \ BOARD_SEPOLICY_DIRS := \