Separate system_ext_property_contexts out of system sepolicy.

Bug: 137712473
Test: boot crosshatch
Change-Id: I27db30edfd9948675793fdfec19081288f8017eb
This commit is contained in:
Bowgo Tsai 2019-09-09 18:09:22 +08:00
parent 241d36eedd
commit 1864cd02fc
4 changed files with 28 additions and 0 deletions

View file

@ -255,6 +255,13 @@ property_contexts {
recovery_available: true,
}
property_contexts {
name: "system_ext_property_contexts",
srcs: [":property_contexts_files"],
system_ext_specific: true,
recovery_available: true,
}
property_contexts {
name: "product_property_contexts",
srcs: [":property_contexts_files"],

View file

@ -318,6 +318,8 @@ LOCAL_REQUIRED_MODULES += \
system_ext_file_contexts_test \
system_ext_hwservice_contexts \
system_ext_hwservice_contexts_test \
system_ext_property_contexts \
system_ext_property_contexts_test \
system_ext_seapp_contexts \
system_ext_mapping_file \

View file

@ -163,6 +163,24 @@ $(eval $(call run_contexts_test, $(pc_files), $(property_info_checker),))
##################################
ifdef HAS_SYSTEM_EXT_SEPOLICY
pc_files += $(system_ext_out)/system_ext_property_contexts
include $(CLEAR_VARS)
LOCAL_MODULE := system_ext_property_contexts_test
LOCAL_MODULE_CLASS := FAKE
LOCAL_MODULE_TAGS := optional
include $(BUILD_SYSTEM)/base_rules.mk
$(eval $(call run_contexts_test, $(pc_files), $(property_info_checker),))
endif
##################################
pc_files += $(vendor_out)/vendor_property_contexts
include $(CLEAR_VARS)

View file

@ -424,6 +424,7 @@
/(system_ext|system/system_ext)/etc/selinux/system_ext_file_contexts u:object_r:file_contexts_file:s0
/(system_ext|system/system_ext)/etc/selinux/system_ext_hwservice_contexts u:object_r:hwservice_contexts_file:s0
/(system_ext|system/system_ext)/etc/selinux/system_ext_property_contexts u:object_r:property_contexts_file:s0
/(system_ext|system/system_ext)/etc/selinux/system_ext_seapp_contexts u:object_r:seapp_contexts_file:s0
#############################