Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 1 | LOCAL_PATH:= $(call my-dir) |
William Roberts | f0e0a94 | 2012-08-27 15:41:15 -0700 | [diff] [blame] | 2 | |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 3 | include $(CLEAR_VARS) |
| 4 | |
| 5 | # SELinux policy version. |
Stephen Smalley | b4f1706 | 2015-03-13 10:03:52 -0400 | [diff] [blame] | 6 | # Must be <= /sys/fs/selinux/policyvers reported by the Android kernel. |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 7 | # Must be within the compatibility range reported by checkpolicy -V. |
Jeff Vander Stoep | 64b01c6 | 2015-05-04 11:14:23 -0700 | [diff] [blame] | 8 | POLICYVERS ?= 30 |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 9 | |
| 10 | MLS_SENS=1 |
| 11 | MLS_CATS=1024 |
| 12 | |
Stephen Smalley | b4f1706 | 2015-03-13 10:03:52 -0400 | [diff] [blame] | 13 | ifdef BOARD_SEPOLICY_REPLACE |
| 14 | $(error BOARD_SEPOLICY_REPLACE is no longer supported; please remove from your BoardConfig.mk or other .mk file.) |
| 15 | endif |
| 16 | |
| 17 | ifdef BOARD_SEPOLICY_IGNORE |
| 18 | $(error BOARD_SEPOLICY_IGNORE is no longer supported; please remove from your BoardConfig.mk or other .mk file.) |
| 19 | endif |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 20 | |
Stephen Smalley | 8e0ca88 | 2015-04-01 10:14:56 -0400 | [diff] [blame] | 21 | ifdef BOARD_SEPOLICY_UNION |
| 22 | $(warning BOARD_SEPOLICY_UNION is no longer required - all files found in BOARD_SEPOLICY_DIRS are implicitly unioned; please remove from your BoardConfig.mk or other .mk file.) |
| 23 | endif |
Robert Craig | 6b0ff47 | 2014-01-29 13:10:58 -0500 | [diff] [blame] | 24 | |
Stephen Smalley | 8e0ca88 | 2015-04-01 10:14:56 -0400 | [diff] [blame] | 25 | # Builds paths for all policy files found in BOARD_SEPOLICY_DIRS. |
rpcraig | 47cd396 | 2012-10-17 21:09:52 -0400 | [diff] [blame] | 26 | # $(1): the set of policy name paths to build |
Stephen Smalley | 8e0ca88 | 2015-04-01 10:14:56 -0400 | [diff] [blame] | 27 | build_policy = $(foreach type, $(1), $(wildcard $(addsuffix /$(type), $(LOCAL_PATH) $(BOARD_SEPOLICY_DIRS)))) |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 28 | |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 29 | sepolicy_build_files := security_classes \ |
| 30 | initial_sids \ |
| 31 | access_vectors \ |
| 32 | global_macros \ |
Nick Kralevich | a17a266 | 2014-11-05 15:30:41 -0800 | [diff] [blame] | 33 | neverallow_macros \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 34 | mls_macros \ |
| 35 | mls \ |
| 36 | policy_capabilities \ |
| 37 | te_macros \ |
| 38 | attributes \ |
Jeff Vander Stoep | de9b530 | 2015-06-05 15:28:55 -0700 | [diff] [blame] | 39 | ioctl_macros \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 40 | *.te \ |
| 41 | roles \ |
| 42 | users \ |
| 43 | initial_sid_contexts \ |
| 44 | fs_use \ |
| 45 | genfs_contexts \ |
| 46 | port_contexts |
| 47 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 48 | ################################## |
| 49 | include $(CLEAR_VARS) |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 50 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 51 | LOCAL_MODULE := sepolicy |
| 52 | LOCAL_MODULE_CLASS := ETC |
| 53 | LOCAL_MODULE_TAGS := optional |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 54 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 55 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 56 | include $(BUILD_SYSTEM)/base_rules.mk |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 57 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 58 | sepolicy_policy.conf := $(intermediates)/policy.conf |
| 59 | $(sepolicy_policy.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 60 | $(sepolicy_policy.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 61 | $(sepolicy_policy.conf) : $(call build_policy, $(sepolicy_build_files)) |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 62 | @mkdir -p $(dir $@) |
Nick Kralevich | 623975f | 2014-01-11 01:31:03 -0800 | [diff] [blame] | 63 | $(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \ |
| 64 | -D target_build_variant=$(TARGET_BUILD_VARIANT) \ |
Nick Kralevich | 623975f | 2014-01-11 01:31:03 -0800 | [diff] [blame] | 65 | -s $^ > $@ |
Robert Craig | 65d4f44 | 2013-03-27 06:30:25 -0400 | [diff] [blame] | 66 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 67 | |
Stephen Smalley | 2b826fc | 2012-01-24 08:46:13 -0500 | [diff] [blame] | 68 | $(LOCAL_BUILT_MODULE) : $(sepolicy_policy.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 69 | @mkdir -p $(dir $@) |
Ying Wang | f4ea5b2 | 2012-04-09 15:31:03 -0700 | [diff] [blame] | 70 | $(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $< |
Robert Craig | 65d4f44 | 2013-03-27 06:30:25 -0400 | [diff] [blame] | 71 | $(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $(dir $<)/$(notdir $@).dontaudit $<.dontaudit |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 72 | |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 73 | built_sepolicy := $(LOCAL_BUILT_MODULE) |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 74 | sepolicy_policy.conf := |
Stephen Smalley | 01a58af | 2012-10-02 12:46:37 -0400 | [diff] [blame] | 75 | |
Stephen Smalley | e60723a | 2014-05-29 16:40:15 -0400 | [diff] [blame] | 76 | ################################## |
| 77 | include $(CLEAR_VARS) |
| 78 | |
| 79 | LOCAL_MODULE := sepolicy.recovery |
| 80 | LOCAL_MODULE_CLASS := ETC |
| 81 | LOCAL_MODULE_TAGS := eng |
| 82 | |
| 83 | include $(BUILD_SYSTEM)/base_rules.mk |
| 84 | |
| 85 | sepolicy_policy_recovery.conf := $(intermediates)/policy_recovery.conf |
| 86 | $(sepolicy_policy_recovery.conf): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 87 | $(sepolicy_policy_recovery.conf): PRIVATE_MLS_CATS := $(MLS_CATS) |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 88 | $(sepolicy_policy_recovery.conf) : $(call build_policy, $(sepolicy_build_files)) |
Stephen Smalley | e60723a | 2014-05-29 16:40:15 -0400 | [diff] [blame] | 89 | @mkdir -p $(dir $@) |
| 90 | $(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \ |
| 91 | -D target_build_variant=$(TARGET_BUILD_VARIANT) \ |
Stephen Smalley | e60723a | 2014-05-29 16:40:15 -0400 | [diff] [blame] | 92 | -D target_recovery=true \ |
| 93 | -s $^ > $@ |
| 94 | |
| 95 | $(LOCAL_BUILT_MODULE) : $(sepolicy_policy_recovery.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy |
| 96 | @mkdir -p $(dir $@) |
| 97 | $(hide) $(HOST_OUT_EXECUTABLES)/checkpolicy -M -c $(POLICYVERS) -o $@ $< |
| 98 | |
| 99 | built_sepolicy_recovery := $(LOCAL_BUILT_MODULE) |
| 100 | sepolicy_policy_recovery.conf := |
| 101 | |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 102 | ################################## |
| 103 | include $(CLEAR_VARS) |
| 104 | |
| 105 | LOCAL_MODULE := general_sepolicy.conf |
| 106 | LOCAL_MODULE_CLASS := ETC |
| 107 | LOCAL_MODULE_TAGS := tests |
| 108 | |
| 109 | include $(BUILD_SYSTEM)/base_rules.mk |
| 110 | |
| 111 | exp_sepolicy_build_files :=\ |
| 112 | $(wildcard $(addprefix $(LOCAL_PATH)/, $(sepolicy_build_files))) |
| 113 | |
| 114 | $(LOCAL_BUILT_MODULE): PRIVATE_MLS_SENS := $(MLS_SENS) |
| 115 | $(LOCAL_BUILT_MODULE): PRIVATE_MLS_CATS := $(MLS_CATS) |
| 116 | $(LOCAL_BUILT_MODULE): $(exp_sepolicy_build_files) |
| 117 | mkdir -p $(dir $@) |
| 118 | $(hide) m4 -D mls_num_sens=$(PRIVATE_MLS_SENS) -D mls_num_cats=$(PRIVATE_MLS_CATS) \ |
| 119 | -D target_build_variant=user \ |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 120 | -s $^ > $@ |
| 121 | $(hide) sed '/dontaudit/d' $@ > $@.dontaudit |
| 122 | |
| 123 | GENERAL_SEPOLICY_POLICY.CONF = $(LOCAL_BUILT_MODULE) |
| 124 | |
| 125 | exp_sepolicy_build_files := |
| 126 | |
| 127 | ################################## |
Stephen Smalley | 01a58af | 2012-10-02 12:46:37 -0400 | [diff] [blame] | 128 | include $(CLEAR_VARS) |
| 129 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 130 | LOCAL_MODULE := file_contexts |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 131 | LOCAL_MODULE_CLASS := ETC |
| 132 | LOCAL_MODULE_TAGS := optional |
| 133 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 134 | |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 135 | include $(BUILD_SYSTEM)/base_rules.mk |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 136 | |
rpcraig | 47cd396 | 2012-10-17 21:09:52 -0400 | [diff] [blame] | 137 | ALL_FC_FILES := $(call build_policy, file_contexts) |
Stephen Smalley | 01a58af | 2012-10-02 12:46:37 -0400 | [diff] [blame] | 138 | |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 139 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 140 | $(LOCAL_BUILT_MODULE): $(ALL_FC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 141 | @mkdir -p $(dir $@) |
Stephen Smalley | 01a58af | 2012-10-02 12:46:37 -0400 | [diff] [blame] | 142 | $(hide) m4 -s $(ALL_FC_FILES) > $@ |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 143 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $@ |
Stephen Smalley | 5b340be | 2012-03-06 11:12:41 -0500 | [diff] [blame] | 144 | |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 145 | built_fc := $(LOCAL_BUILT_MODULE) |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 146 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 147 | ################################## |
| 148 | include $(CLEAR_VARS) |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 149 | |
| 150 | LOCAL_MODULE := general_file_contexts |
| 151 | LOCAL_MODULE_CLASS := ETC |
| 152 | LOCAL_MODULE_TAGS := tests |
| 153 | |
| 154 | include $(BUILD_SYSTEM)/base_rules.mk |
| 155 | |
| 156 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 157 | $(LOCAL_BUILT_MODULE) : $(addprefix $(LOCAL_PATH)/, file_contexts) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
| 158 | @mkdir -p $(dir $@) |
| 159 | $(hide) m4 -s $< > $@ |
| 160 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc $(PRIVATE_SEPOLICY) $@ |
| 161 | |
| 162 | GENERAL_FILE_CONTEXTS := $(LOCAL_BUILT_MODULE) |
| 163 | |
| 164 | ################################## |
| 165 | include $(CLEAR_VARS) |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 166 | LOCAL_MODULE := seapp_contexts |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 167 | LOCAL_MODULE_CLASS := ETC |
| 168 | LOCAL_MODULE_TAGS := optional |
| 169 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 170 | |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 171 | include $(BUILD_SYSTEM)/base_rules.mk |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 172 | |
William Roberts | 98ed392 | 2012-09-05 11:19:07 -0700 | [diff] [blame] | 173 | seapp_contexts.tmp := $(intermediates)/seapp_contexts.tmp |
rpcraig | 47cd396 | 2012-10-17 21:09:52 -0400 | [diff] [blame] | 174 | $(seapp_contexts.tmp): $(call build_policy, seapp_contexts) |
William Roberts | 171a062 | 2012-08-16 10:55:05 -0700 | [diff] [blame] | 175 | @mkdir -p $(dir $@) |
| 176 | $(hide) m4 -s $^ > $@ |
| 177 | |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 178 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 179 | $(LOCAL_BUILT_MODULE) : $(seapp_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkseapp |
William Roberts | f0e0a94 | 2012-08-27 15:41:15 -0700 | [diff] [blame] | 180 | @mkdir -p $(dir $@) |
Ying Wang | d8b122c | 2012-10-25 19:01:31 -0700 | [diff] [blame] | 181 | $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $< |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 182 | |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 183 | built_sc := $(LOCAL_BUILT_MODULE) |
William Roberts | 98ed392 | 2012-09-05 11:19:07 -0700 | [diff] [blame] | 184 | seapp_contexts.tmp := |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 185 | |
Ying Wang | 02fb5f3 | 2012-01-17 17:51:09 -0800 | [diff] [blame] | 186 | ################################## |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 187 | include $(CLEAR_VARS) |
Stephen Smalley | 3771287 | 2015-03-12 15:46:36 -0400 | [diff] [blame] | 188 | LOCAL_MODULE := general_seapp_contexts |
| 189 | LOCAL_MODULE_CLASS := ETC |
| 190 | LOCAL_MODULE_TAGS := tests |
| 191 | |
| 192 | include $(BUILD_SYSTEM)/base_rules.mk |
| 193 | |
| 194 | general_seapp_contexts.tmp := $(intermediates)/general_seapp_contexts.tmp |
| 195 | $(general_seapp_contexts.tmp): $(addprefix $(LOCAL_PATH)/, seapp_contexts) |
| 196 | @mkdir -p $(dir $@) |
| 197 | $(hide) m4 -s $^ > $@ |
| 198 | |
| 199 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 200 | $(LOCAL_BUILT_MODULE) : $(general_seapp_contexts.tmp) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkseapp |
| 201 | @mkdir -p $(dir $@) |
| 202 | $(HOST_OUT_EXECUTABLES)/checkseapp -p $(PRIVATE_SEPOLICY) -o $@ $< |
| 203 | |
| 204 | GENERAL_SEAPP_CONTEXTS := $(LOCAL_BUILT_MODULE) |
| 205 | general_seapp_contexts.tmp := |
| 206 | |
| 207 | ################################## |
| 208 | include $(CLEAR_VARS) |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 209 | |
| 210 | LOCAL_MODULE := property_contexts |
| 211 | LOCAL_MODULE_CLASS := ETC |
| 212 | LOCAL_MODULE_TAGS := optional |
| 213 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 214 | |
| 215 | include $(BUILD_SYSTEM)/base_rules.mk |
| 216 | |
Robert Craig | d98d26e | 2013-01-23 14:04:50 -0500 | [diff] [blame] | 217 | ALL_PC_FILES := $(call build_policy, property_contexts) |
| 218 | |
| 219 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 220 | $(LOCAL_BUILT_MODULE): $(ALL_PC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 221 | @mkdir -p $(dir $@) |
Robert Craig | d98d26e | 2013-01-23 14:04:50 -0500 | [diff] [blame] | 222 | $(hide) m4 -s $(ALL_PC_FILES) > $@ |
| 223 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@ |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 224 | |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 225 | built_pc := $(LOCAL_BUILT_MODULE) |
| 226 | |
Stephen Smalley | 124720a | 2012-04-04 10:11:16 -0400 | [diff] [blame] | 227 | ################################## |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 228 | include $(CLEAR_VARS) |
| 229 | |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 230 | LOCAL_MODULE := general_property_contexts |
| 231 | LOCAL_MODULE_CLASS := ETC |
| 232 | LOCAL_MODULE_TAGS := tests |
| 233 | |
Stephen Smalley | c936173 | 2015-03-13 09:36:57 -0400 | [diff] [blame] | 234 | include $(BUILD_SYSTEM)/base_rules.mk |
| 235 | |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 236 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 237 | $(LOCAL_BUILT_MODULE) : $(addprefix $(LOCAL_PATH)/, property_contexts) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
| 238 | @mkdir -p $(dir $@) |
| 239 | $(hide) m4 -s $< > $@ |
| 240 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@ |
| 241 | |
| 242 | GENERAL_PROPERTY_CONTEXTS := $(LOCAL_BUILT_MODULE) |
| 243 | |
| 244 | ################################## |
| 245 | include $(CLEAR_VARS) |
| 246 | |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 247 | LOCAL_MODULE := service_contexts |
| 248 | LOCAL_MODULE_CLASS := ETC |
| 249 | LOCAL_MODULE_TAGS := optional |
| 250 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 251 | |
| 252 | include $(BUILD_SYSTEM)/base_rules.mk |
| 253 | |
| 254 | ALL_SVC_FILES := $(call build_policy, service_contexts) |
| 255 | |
| 256 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 257 | $(LOCAL_BUILT_MODULE): $(ALL_SVC_FILES) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
| 258 | @mkdir -p $(dir $@) |
| 259 | $(hide) m4 -s $(ALL_SVC_FILES) > $@ |
| 260 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@ |
| 261 | |
| 262 | built_svc := $(LOCAL_BUILT_MODULE) |
| 263 | |
| 264 | ################################## |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 265 | include $(CLEAR_VARS) |
| 266 | |
Stephen Smalley | 2e0cd5a | 2015-03-12 17:45:03 -0400 | [diff] [blame] | 267 | LOCAL_MODULE := general_service_contexts |
| 268 | LOCAL_MODULE_CLASS := ETC |
| 269 | LOCAL_MODULE_TAGS := tests |
| 270 | |
| 271 | include $(BUILD_SYSTEM)/base_rules.mk |
| 272 | |
| 273 | $(LOCAL_BUILT_MODULE): PRIVATE_SEPOLICY := $(built_sepolicy) |
| 274 | $(LOCAL_BUILT_MODULE) : $(addprefix $(LOCAL_PATH)/, service_contexts) $(built_sepolicy) $(HOST_OUT_EXECUTABLES)/checkfc |
| 275 | @mkdir -p $(dir $@) |
| 276 | $(hide) m4 -s $< > $@ |
| 277 | $(hide) $(HOST_OUT_EXECUTABLES)/checkfc -p $(PRIVATE_SEPOLICY) $@ |
| 278 | |
| 279 | GENERAL_SERVICE_CONTEXTS := $(LOCAL_BUILT_MODULE) |
| 280 | |
| 281 | ################################## |
| 282 | include $(CLEAR_VARS) |
| 283 | |
Robert Craig | 7f2392e | 2013-03-27 08:35:39 -0400 | [diff] [blame] | 284 | LOCAL_MODULE := mac_permissions.xml |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 285 | LOCAL_MODULE_CLASS := ETC |
| 286 | LOCAL_MODULE_TAGS := optional |
| 287 | LOCAL_MODULE_PATH := $(TARGET_OUT_ETC)/security |
| 288 | |
William Roberts | 2c8a55d | 2012-11-30 14:59:09 -0800 | [diff] [blame] | 289 | include $(BUILD_SYSTEM)/base_rules.mk |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 290 | |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 291 | # Build keys.conf |
| 292 | mac_perms_keys.tmp := $(intermediates)/keys.tmp |
| 293 | $(mac_perms_keys.tmp) : $(call build_policy, keys.conf) |
| 294 | @mkdir -p $(dir $@) |
| 295 | $(hide) m4 -s $^ > $@ |
| 296 | |
Robert Craig | 7f2392e | 2013-03-27 08:35:39 -0400 | [diff] [blame] | 297 | ALL_MAC_PERMS_FILES := $(call build_policy, $(LOCAL_MODULE)) |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 298 | |
Robert Craig | 7f2392e | 2013-03-27 08:35:39 -0400 | [diff] [blame] | 299 | $(LOCAL_BUILT_MODULE) : $(mac_perms_keys.tmp) $(HOST_OUT_EXECUTABLES)/insertkeys.py $(ALL_MAC_PERMS_FILES) |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 300 | @mkdir -p $(dir $@) |
Nick Kralevich | c3c9052 | 2013-10-25 12:25:36 -0700 | [diff] [blame] | 301 | $(hide) DEFAULT_SYSTEM_DEV_CERTIFICATE="$(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))" \ |
| 302 | $(HOST_OUT_EXECUTABLES)/insertkeys.py -t $(TARGET_BUILD_VARIANT) -c $(TOP) $< -o $@ $(ALL_MAC_PERMS_FILES) |
Geremy Condra | cd4104e | 2013-03-26 18:19:12 +0000 | [diff] [blame] | 303 | |
Robert Craig | 7f2392e | 2013-03-27 08:35:39 -0400 | [diff] [blame] | 304 | mac_perms_keys.tmp := |
rpcraig | b19665c | 2012-07-30 09:33:03 -0400 | [diff] [blame] | 305 | ################################## |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 306 | include $(CLEAR_VARS) |
| 307 | |
| 308 | LOCAL_MODULE := selinux_version |
| 309 | LOCAL_MODULE_CLASS := ETC |
| 310 | LOCAL_MODULE_TAGS := optional |
| 311 | LOCAL_MODULE_PATH := $(TARGET_ROOT_OUT) |
| 312 | |
| 313 | include $(BUILD_SYSTEM)/base_rules.mk |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 314 | $(LOCAL_BUILT_MODULE) : $(built_sepolicy) $(built_pc) $(built_fc) $(built_sc) $(built_svc) |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 315 | @mkdir -p $(dir $@) |
| 316 | $(hide) echo -n $(BUILD_FINGERPRINT) > $@ |
| 317 | |
| 318 | ################################## |
rpcraig | 47cd396 | 2012-10-17 21:09:52 -0400 | [diff] [blame] | 319 | |
| 320 | build_policy := |
dcashman | 704741a | 2014-07-25 19:11:52 -0700 | [diff] [blame] | 321 | sepolicy_build_files := |
Robert Craig | 8b7545b | 2014-03-20 09:35:08 -0400 | [diff] [blame] | 322 | built_sepolicy := |
| 323 | built_sc := |
| 324 | built_fc := |
| 325 | built_pc := |
Riley Spahn | f90c41f | 2014-06-05 15:52:02 -0700 | [diff] [blame] | 326 | built_svc := |
Alice Chu | cdfb06f | 2012-11-01 11:33:04 -0700 | [diff] [blame] | 327 | |
| 328 | include $(call all-makefiles-under,$(LOCAL_PATH)) |