aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorWilliam Roberts <william.c.roberts@intel.com>2015-07-16 11:28:02 -0700
committerNick Kralevich <nnk@google.com>2015-07-24 23:20:53 +0000
commitd21855824d178abea9ac93376757c7aed765cd83 (patch)
tree41ad2c7fe01d6dff6b2ddc8e32f7812ca11b5f79 /README
parent29a463d5d594a1b83288eff2da1f8829a69d3d46 (diff)
downloadsepolicy-d21855824d178abea9ac93376757c7aed765cd83.tar.gz
Android.mk: Add support for BOARD_SEPOLICY_M4DEFS
Allow device builders to pass arbitrary m4 definitions during the build via make variable BOARD_SEPOLICY_M4DEFS. This enables OEMs to define their own static policy build conditionals. Change-Id: Ibea1dbb7b8615576c5668e47f16ed0eedfa0b73c Signed-off-by: William Roberts <william.c.roberts@intel.com>
Diffstat (limited to 'README')
-rw-r--r--README15
1 files changed, 15 insertions, 0 deletions
diff --git a/README b/README
index 8202c67..972997a 100644
--- a/README
+++ b/README
@@ -26,6 +26,21 @@ From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk
BOARD_SEPOLICY_DIRS += device/samsung/tuna/sepolicy
+Additionally, OEMs can specify BOARD_SEPOLICY_M4DEFS to pass arbitrary m4
+definitions during the build. A definition consists of a string in the form
+of macro-name=value. Spaces must NOT be present. This is useful for building modular
+policies, policy generation, conditional file paths, etc. It is supported in
+the following file types:
+ * All *.te and SE Linux policy files as passed to checkpolicy
+ * file_contexts
+ * service_contexts
+ * property_contexts
+ * keys.conf
+
+Example BoardConfig.mk Usage:
+BOARD_SEPOLICY_M4DEFS += btmodule=foomatic \
+ btdevice=/dev/gps
+
SPECIFIC POLICY FILE INFORMATION
mac_permissions.xml: