Vaisakh Murali aea3299924 sepolicy: Build with broken namespaces
The userspace blobs that we have are proprietary. Rather than hex
editing each one of those blobs to match the allowed namespaces, it
is better to avoid the restriction as a whole.
This is needed until we have newer userspace blobs with proper
property namespaces allowed by the VTS.

Signed-off-by: Vaisakh Murali <mvaisakh@statixos.com>
Change-Id: I2abc9821f28885a89cf8905a58475a68766d38d2
Reviewed-on: https://review.statixos.com/c/android_device_mediatek_sepolicy_vndr/+/6330
Reviewed-by: Vaisakh Murali <vaisakhmurali@gmail.com>
Tested-by: Vaisakh Murali <vaisakhmurali@gmail.com>
2023-01-02 23:47:43 +01:00

27 lines
958 B
Makefile

# Board specific SELinux policy variable definitions
MTK_SEPOLICY_PATH := device/mediatek/sepolicy_vndr
# Build with broken namespaces
# Userspace blobs are still dependent older props that
# do not pass the VTS test cases.
BUILD_BROKEN_VENDOR_PROPERTY_NAMESPACE := true
BOARD_SEPOLICY_DIRS += \
$(MTK_SEPOLICY_PATH)/basic/non_plat \
$(MTK_SEPOLICY_PATH)/basic/debug/non_plat \
$(MTK_SEPOLICY_PATH)/bsp/non_plat \
$(MTK_SEPOLICY_PATH)/bsp/debug/non_plat \
$(MTK_SEPOLICY_PATH)/modem
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
$(MTK_SEPOLICY_PATH)/basic/plat_private \
$(MTK_SEPOLICY_PATH)/basic/debug/plat_private \
$(MTK_SEPOLICY_PATH)/bsp/plat_private \
$(MTK_SEPOLICY_PATH)/bsp/debug/plat_private
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
$(MTK_SEPOLICY_PATH)/basic/plat_public \
$(MTK_SEPOLICY_PATH)/basic/debug/plat_public \
$(MTK_SEPOLICY_PATH)/bsp/plat_public \
$(MTK_SEPOLICY_PATH)/bsp/debug/plat_public