sepolicy: add version_policy tool and version non-platform policy.
In order to support platform changes without simultaneous updates from non-platform components, the platform and non-platform policies must be split. In order to provide a guarantee that policy written for non-platform objects continues to provide the same access, all types exposed to non-platform policy are versioned by converting them and the policy using them into attributes. This change performs that split, the subsequent versioning and also generates a mapping file to glue the different policy components together. Test: Device boots and runs. Bug: 31369363 Change-Id: Ibfd3eb077bd9b8e2ff3b2e6a0ca87e44d78b1317
Showing
- Android.mk 160 additions, 26 deletionsAndroid.mk
- private/app.te 3 additions, 0 deletionsprivate/app.te
- private/bluetooth.te 5 additions, 0 deletionsprivate/bluetooth.te
- private/domain.te 10 additions, 0 deletionsprivate/domain.te
- private/drmserver.te 2 additions, 0 deletionsprivate/drmserver.te
- private/dumpstate.te 9 additions, 0 deletionsprivate/dumpstate.te
- private/ephemeral_app.te 6 additions, 0 deletionsprivate/ephemeral_app.te
- private/file.te 4 additions, 0 deletionsprivate/file.te
- private/installd.te 3 additions, 0 deletionsprivate/installd.te
- private/isolated_app.te 7 additions, 0 deletionsprivate/isolated_app.te
- private/logd.te 5 additions, 0 deletionsprivate/logd.te
- private/mls 0 additions, 12 deletionsprivate/mls
- private/mls_decl 10 additions, 0 deletionsprivate/mls_decl
- private/nfc.te 4 additions, 0 deletionsprivate/nfc.te
- private/platform_app.te 4 additions, 0 deletionsprivate/platform_app.te
- private/priv_app.te 8 additions, 0 deletionsprivate/priv_app.te
- private/radio.te 4 additions, 0 deletionsprivate/radio.te
- private/recovery_persist.te 4 additions, 0 deletionsprivate/recovery_persist.te
- private/recovery_refresh.te 4 additions, 0 deletionsprivate/recovery_refresh.te
- private/roles_decl 1 addition, 0 deletionsprivate/roles_decl
Loading
Please register or sign in to comment