| William Roberts | 8afa546 | 2016-09-21 16:06:37 -0700 | [diff] [blame] | 1 | This fork of Android differs in the following ways: |
| 2 | - README.android |
| 3 | - All Android.mk and Android.bp files |
| 4 | - ALL MODULE_LICENSE_* files |
| 5 | - libselinux/include/selinux/android.h |
| 6 | - libselinux/src/android/android.c |
| 7 | |
| 8 | All other changes should be upstreamed to selinux as |
| 9 | Android no longer carries changes outside of those files. |
| 10 | |
| 11 | The upstream project can be found at: |
| 12 | https://github.com/SELinuxProject/selinux |
| 13 | |
| 14 | Thus, since all changes are in separate files, updates merged from |
| 15 | upstream should occur with no merge conflicts. |
| 16 | |
| 17 | This fork differs from upstream libselinux in at least the following ways: |
| 18 | |
| 19 | * The Android fork omits compiling many of the src files and specifies |
| 20 | custom build configurations. The exact details, are encoded in the |
| 21 | Android.bp and Android.mk files. |
| 22 | |
| 23 | * The SELinux policy files are all located in / rather than under |
| 24 | /etc/selinux since /etc is not available in Android until /system |
| 25 | is mounted and use fixed paths, not dependent on /etc/selinux/config. |
| 26 | |
| 27 | * The kernel policy file (sepolicy in Android, policy.N in Linux) does |
| 28 | not include a version suffix since Android does not need to support |
| 29 | booting multiple kernels. |
| 30 | |
| 31 | * The policy loading logic does not support automatic downgrading of |
| 32 | the kernel policy file to a version known to the kernel, since this |
| 33 | requires libsepol on the device and is only needed to support mixing |
| 34 | and matching kernels and userspace easily. |
| 35 | |
| 36 | * restorecon functionality, including recursive restorecon, has been |
| 37 | been upstreamed as selinux_restorecon(), but there are residual |
| 38 | differences between it and selinux_android_restorecon(). |
| 39 | |
| 40 | * Support for seapp_contexts, a new Android-specific SELinux |
| 41 | configuration file has been added within android.c. |