c256de4169
Ignore-AOSP-First: vFRC Bug: 337978860 Test: run script manually Change-Id: I5ce97864e3cb38bfff03c3093681d98dffda6a43
125 lines
3.6 KiB
Bash
Executable file
125 lines
3.6 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# Copyright (C) 2023 The Android Open Source Project
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
if [ $# -ne 2 ]; then
|
|
echo "Usage: $0 <top> <ver>"
|
|
exit 1
|
|
fi
|
|
|
|
top=$1
|
|
ver=$2
|
|
|
|
prebuilt_dir=$top/system/sepolicy/prebuilts/api/$ver
|
|
mkdir -p "$prebuilt_dir"
|
|
cp -r "$top/system/sepolicy/public/" "$prebuilt_dir"
|
|
cp -r "$top/system/sepolicy/private/" "$prebuilt_dir"
|
|
|
|
cat > "$prebuilt_dir/Android.bp" <<EOF
|
|
// Automatically generated file, do not edit!
|
|
se_policy_conf {
|
|
name: "${ver}_plat_pub_policy.conf",
|
|
defaults: ["se_policy_conf_flags_defaults"],
|
|
srcs: [
|
|
":se_build_files{.plat_public_${ver}}",
|
|
":se_build_files{.reqd_mask}",
|
|
],
|
|
installable: false,
|
|
build_variant: "user",
|
|
}
|
|
|
|
se_policy_cil {
|
|
name: "${ver}_plat_pub_policy.cil",
|
|
src: ":${ver}_plat_pub_policy.conf",
|
|
filter_out: [":reqd_policy_mask.cil"],
|
|
secilc_check: false,
|
|
installable: false,
|
|
}
|
|
|
|
se_policy_conf {
|
|
name: "${ver}_product_pub_policy.conf",
|
|
defaults: ["se_policy_conf_flags_defaults"],
|
|
srcs: [
|
|
":se_build_files{.plat_public_${ver}}",
|
|
":se_build_files{.system_ext_public_${ver}}",
|
|
":se_build_files{.product_public_${ver}}",
|
|
":se_build_files{.reqd_mask}",
|
|
],
|
|
installable: false,
|
|
build_variant: "user",
|
|
}
|
|
|
|
se_policy_cil {
|
|
name: "${ver}_product_pub_policy.cil",
|
|
src: ":${ver}_product_pub_policy.conf",
|
|
filter_out: [":reqd_policy_mask.cil"],
|
|
secilc_check: false,
|
|
installable: false,
|
|
}
|
|
|
|
se_policy_conf {
|
|
name: "${ver}_plat_policy.conf",
|
|
defaults: ["se_policy_conf_flags_defaults"],
|
|
srcs: [
|
|
":se_build_files{.plat_public_${ver}}",
|
|
":se_build_files{.plat_private_${ver}}",
|
|
":se_build_files{.system_ext_public_${ver}}",
|
|
":se_build_files{.system_ext_private_${ver}}",
|
|
":se_build_files{.product_public_${ver}}",
|
|
":se_build_files{.product_private_${ver}}",
|
|
],
|
|
installable: false,
|
|
build_variant: "user",
|
|
}
|
|
|
|
se_policy_cil {
|
|
name: "${ver}_plat_policy.cil",
|
|
src: ":${ver}_plat_policy.conf",
|
|
additional_cil_files: [":sepolicy_technical_debt{.plat_private_${ver}}"],
|
|
installable: false,
|
|
}
|
|
|
|
se_policy_binary {
|
|
name: "${ver}_plat_policy",
|
|
srcs: [":${ver}_plat_policy.cil"],
|
|
installable: false,
|
|
dist: {
|
|
targets: ["base-sepolicy-files-for-mapping"],
|
|
},
|
|
}
|
|
EOF
|
|
|
|
# Build general_sepolicy.conf, plat_sepolicy.cil, and mapping file for CTS
|
|
DIST_DIR=out/dist $top/build/soong/soong_ui.bash --make-mode dist sepolicy_finalize bpmodify
|
|
|
|
cp "$top/out/dist/plat_sepolicy.cil" "$prebuilt_dir/${ver}_plat_sepolicy.cil"
|
|
cp "$top/out/dist/general_sepolicy.conf" "$prebuilt_dir/${ver}_general_sepolicy.conf"
|
|
cp "$top/out/dist/$ver.cil" "$prebuilt_dir/${ver}_mapping.cil"
|
|
|
|
cat >> "$prebuilt_dir/Android.bp" <<EOF
|
|
|
|
filegroup {
|
|
name: "${ver}_sepolicy_cts_data",
|
|
srcs: [
|
|
"${ver}_general_sepolicy.conf",
|
|
"${ver}_plat_sepolicy.cil",
|
|
"${ver}_mapping.cil",
|
|
],
|
|
}
|
|
EOF
|
|
|
|
bpmodify="$top/out/host/linux-x86/bin/bpmodify"
|
|
$bpmodify -a ":${ver}_sepolicy_cts_data" -m prebuilt_sepolicy_cts_data -property srcs -w \
|
|
$top/system/sepolicy/tests/Android.bp
|