diff options
| author | Bowgo Tsai <bowgotsai@google.com> | 2019-08-28 17:56:51 +0800 |
|---|---|---|
| committer | Bowgo Tsai <bowgotsai@google.com> | 2019-09-20 18:20:21 +0800 |
| commit | 266112bab28fd05b31724b57694b8ce6c94a5f09 (patch) | |
| tree | 69d3983d3f2ccd48f64cd501848009c1c4e00125 /code_coverage/empty_policy | |
| parent | e02cd8a64f15371dda6f5be14bcd2c1d4281c38a (diff) | |
Separate system_ext_sepolicy.cil out of system sepolicy
Currently system sepolicy can be extended via:
- BOARD_PLAT_PUBLIC_SEPOLICY_DIR
- BOARD_PLAT_PRIVATE_SEPOLICY_DIR
To support having a single shared core system sepolicy, those
customization should be moved to the newly added system_ext partition.
System-ext-specific sepolicy files will be installed into
/system_ext/etc/selinux/*. system_ext_sepolicy.cil is merged into
precompiled_sepolicy at build-time. In case precompiled_sepolicy can't
be used (e.g. system-only-ota), the init will merge this file with
the rest of the sepolicy at runtime.
Bug: 137712473
Test: boot aosp_crosshatch with system_ext_sepolicy.cil
Test: boot aosp_crosshatch without system_ext_sepolicy.cil
Change-Id: Ib37622271b559d65462de99ff424be831004508a
Diffstat (limited to 'code_coverage/empty_policy')
0 files changed, 0 insertions, 0 deletions