Skip to content
Snippets Groups Projects
  • Jae Shin's avatar
    Add mapping files for 28.0.[ignore.]cil · 1fa96348
    Jae Shin authored
    Steps taken to produce the mapping files:
    
    1. Add prebuilts/api/28.0/[plat_pub_versioned.cil|vendor_sepolicy.cil]
    from the /vendor/etc/selinux/[plat_pub_versioned.cil|vendor_sepolicy.cil]
    files built on pi-dev with lunch target aosp_arm64-eng
    
    2. Add new file private/compat/28.0/28.0.cil by doing the following:
    - copy /system/etc/selinux/mapping/28.0.cil from pi-dev aosp_arm64-eng
    device to private/compat/28.0/28.0.cil
    - remove all attribute declaration statement (typeattribute ...) and
    sort lines alphabetically
    - some selinux types were added/renamed/deleted w.r.t 28 sepolicy.
    Find all such types using treble_sepolicy_tests_28.0 test.
    - for all these types figure out where to map them by looking at
    27.0.[ignore.]cil files and add approprite entries to 28.0.[ignore.]cil.
    
    This change also enables treble_sepolicy_tests_28.0 and install 28.0.cil
    mapping onto the device.
    
    Bug: 72458734
    Test: m selinux_policy
    Change-Id: I90e17c0b43af436da4b62c16179c198b5c74002c
    1fa96348
Android.bp 1.19 KiB
// Copyright (C) 2018 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

se_filegroup {
    name: "26.0.board.compat.map",
    srcs: [
        "compat/26.0/26.0.cil",
    ],
}

se_filegroup {
    name: "27.0.board.compat.map",
    srcs: [
        "compat/27.0/27.0.cil",
    ],
}

se_filegroup {
    name: "28.0.board.compat.map",
    srcs: [
        "compat/28.0/28.0.cil",
    ],
}

se_cil_compat_map {
    name: "26.0.cil",
    srcs: [
        ":26.0.board.compat.map",
    ],
}

se_cil_compat_map {
    name: "27.0.cil",
    srcs: [
        ":27.0.board.compat.map",
    ],
}

se_cil_compat_map {
    name: "28.0.cil",
    srcs: [
        ":28.0.board.compat.map",
    ],
}