Skip to content
Snippets Groups Projects
Commit 35e308cf authored by Sandeep Patil's avatar Sandeep Patil
Browse files

Make sure all public types are defined regardless of build variants


The types need to be exported so userdebug system.img
can still build the policy with a user vendor.img at boot time.
All permissions and attributes for these types are still kept under
conditional userdebug_or_eng macro

Bug: 37433251
Test: Boot sailfish-user build with generic_arm64_ab system.img on
      sailfish and make sure sepolicy compilation succeeds

Change-Id: I98e8428c414546dfc74641700d4846edcf9355b1
Signed-off-by: default avatarSandeep Patil <sspatil@google.com>
parent 97903c05
No related branches found
No related tags found
No related merge requests found
# perfprofd - perf profile collection daemon # perfprofd - perf profile collection daemon
type perfprofd, domain;
type perfprofd_exec, exec_type, file_type; type perfprofd_exec, exec_type, file_type;
userdebug_or_eng(` userdebug_or_eng(`
type perfprofd, domain, domain_deprecated, mlstrustedsubject, coredomain; typeattribute perfprofd domain_deprecated;
typeattribute perfprofd coredomain;
typeattribute perfprofd mlstrustedsubject;
# perfprofd needs to control CPU hot-plug in order to avoid kernel # perfprofd needs to control CPU hot-plug in order to avoid kernel
# perfevents problems in cases where CPU goes on/off during measurement; # perfevents problems in cases where CPU goes on/off during measurement;
......
# All types must be defined regardless of build variant to ensure
# policy compilation succeeds with userdebug/user combination at boot
type su, domain;
# File types must be defined for file_contexts. # File types must be defined for file_contexts.
type su_exec, exec_type, file_type; type su_exec, exec_type, file_type;
...@@ -5,7 +9,7 @@ userdebug_or_eng(` ...@@ -5,7 +9,7 @@ userdebug_or_eng(`
# Domain used for su processes, as well as for adbd and adb shell # Domain used for su processes, as well as for adbd and adb shell
# after performing an adb root command. The domain definition is # after performing an adb root command. The domain definition is
# wrapped to ensure that it does not exist at all on -user builds. # wrapped to ensure that it does not exist at all on -user builds.
type su, domain, mlstrustedsubject; typeattribute su mlstrustedsubject;
# Add su to various domains # Add su to various domains
net_domain(su) net_domain(su)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment