4f9a648e90
As the platform progresses in the split SELinux world, the platform will need to maintain mapping files back to previous platform versions to maintain backwards compatibility with vendor images which have SELinux policy written based on the older versions. This requires shipping multiple mapping files with the system image so that the right one can be selected. Change the name and location of the mapping file to reflect this. Also add a file to the vendor partition indicating which version is being targeted that the platform can use to determine which mapping file to choose. Bug: 36783775 Test: Force compilation of sepolicy on-device with mapping file changed to new location and name, using the value reported on /vendor. Change-Id: I93ab3e52c2c80c493719dc3825bc731867ea76d4
73 lines
3.6 KiB
Makefile
73 lines
3.6 KiB
Makefile
# Copyright (C) 2015 The Android Open Source Project
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
# If you don't need to do a full clean build but would like to touch
|
|
# a file or delete some intermediate files, add a clean step to the end
|
|
# of the list. These steps will only be run once, if they haven't been
|
|
# run before.
|
|
#
|
|
# E.g.:
|
|
# $(call add-clean-step, touch -c external/sqlite/sqlite3.h)
|
|
# $(call add-clean-step, rm -rf $(PRODUCT_OUT)/obj/STATIC_LIBRARIES/libz_intermediates)
|
|
#
|
|
# Always use "touch -c" and "rm -f" or "rm -rf" to gracefully deal with
|
|
# files that are missing or have been moved.
|
|
#
|
|
# Use $(PRODUCT_OUT) to get to the "out/target/product/blah/" directory.
|
|
# Use $(OUT_DIR) to refer to the "out" directory.
|
|
#
|
|
# If you need to re-do something that's already mentioned, just copy
|
|
# the command and add it to the bottom of the list. E.g., if a change
|
|
# that you made last week required touching a file and a change you
|
|
# made today requires touching the same file, just copy the old
|
|
# touch step and add it to the end of the list.
|
|
#
|
|
# ************************************************
|
|
# NEWER CLEAN STEPS MUST BE AT THE END OF THE LIST
|
|
# ************************************************
|
|
|
|
# For example:
|
|
#$(call add-clean-step, rm -rf $(OUT_DIR)/target/common/obj/APPS/AndroidTests_intermediates)
|
|
#$(call add-clean-step, rm -rf $(OUT_DIR)/target/common/obj/JAVA_LIBRARIES/core_intermediates)
|
|
#$(call add-clean-step, find $(OUT_DIR) -type f -name "IGTalkSession*" -print0 | xargs -0 rm -f)
|
|
#$(call add-clean-step, rm -rf $(PRODUCT_OUT)/data/*)
|
|
|
|
# ************************************************
|
|
# NEWER CLEAN STEPS MUST BE AT THE END OF THE LIST
|
|
# ************************************************
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/file_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/file_contexts)
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/service_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/service_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/nonplat_property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/nonplat_property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/plat_property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/plat_property_contexts)
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/property_contexts)
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/root/property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/property_contexts)
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/system/etc/selinux/plat_property_contexts)
|
|
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/vendor/etc/selinux/nonplat_property_contexts)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/vendor/etc/selinux/mapping_sepolicy.cil)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/system/etc/selinux/plat_sepolicy.cil.sha256)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/vendor/etc/selinux/precompiled_sepolicy.plat.sha256)
|
|
$(call add-clean-step, rm -rf $(PRODUCT_OUT)/system/etc/selinux/mapping_sepolicy.cil)
|