0d49b9bc28
Rationale for this change: 1) Vendors use only public files, so we should be able to use only public cil files for compatibility test. 2) treble_sepolicy_tests_for_release.mk is too complex, because it requires compiled sepolicy. Reducing the complexity will help migrate into REL build. 3) This fixes a tiny bug of treble_sepolicy_tests that it can't catch public types being moved to private types, and then removed. 29.0.cil and 30.0.cil change contains such missing public types. Bug: 296875906 Test: m selinux_policy (with/without intentional breakage) Change-Id: Ia2c0733176df898f268b5680195da25b588b09c7
58 lines
1.7 KiB
Text
58 lines
1.7 KiB
Text
// Copyright (C) 2023 The Android Open Source Project
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
se_policy_conf {
|
|
name: "31.0_plat_pub_policy.conf",
|
|
srcs: [":se_build_files{.plat_public_31.0}", ":se_build_files{.reqd_mask}"],
|
|
installable: false,
|
|
build_variant: "user",
|
|
}
|
|
|
|
se_policy_cil {
|
|
name: "31.0_plat_pub_policy.cil",
|
|
src: ":31.0_plat_pub_policy.conf",
|
|
filter_out: [":reqd_policy_mask.cil"],
|
|
secilc_check: false,
|
|
installable: false,
|
|
}
|
|
|
|
se_policy_conf {
|
|
name: "31.0_plat_policy.conf",
|
|
srcs: [
|
|
":se_build_files{.plat_public_31.0}",
|
|
":se_build_files{.plat_private_31.0}",
|
|
":se_build_files{.system_ext_public_31.0}",
|
|
":se_build_files{.system_ext_private_31.0}",
|
|
":se_build_files{.product_public_31.0}",
|
|
":se_build_files{.product_private_31.0}",
|
|
],
|
|
installable: false,
|
|
build_variant: "user",
|
|
}
|
|
|
|
se_policy_cil {
|
|
name: "31.0_plat_policy.cil",
|
|
src: ":31.0_plat_policy.conf",
|
|
additional_cil_files: [":sepolicy_technical_debt{.plat_private_31.0}"],
|
|
installable: false,
|
|
}
|
|
|
|
se_policy_binary {
|
|
name: "31.0_plat_policy",
|
|
srcs: [":31.0_plat_policy.cil"],
|
|
installable: false,
|
|
dist: {
|
|
targets: ["base-sepolicy-files-for-mapping"],
|
|
},
|
|
}
|