diff options
author | William Roberts <william.c.roberts@intel.com> | 2015-07-16 11:28:02 -0700 |
---|---|---|
committer | Nick Kralevich <nnk@google.com> | 2015-07-24 23:20:53 +0000 |
commit | d21855824d178abea9ac93376757c7aed765cd83 (patch) | |
tree | 41ad2c7fe01d6dff6b2ddc8e32f7812ca11b5f79 /README | |
parent | 29a463d5d594a1b83288eff2da1f8829a69d3d46 (diff) | |
download | sepolicy-d21855824d178abea9ac93376757c7aed765cd83.tar.gz |
Android.mk: Add support for BOARD_SEPOLICY_M4DEFS
Allow device builders to pass arbitrary m4 definitions
during the build via make variable BOARD_SEPOLICY_M4DEFS.
This enables OEMs to define their own static policy build
conditionals.
Change-Id: Ibea1dbb7b8615576c5668e47f16ed0eedfa0b73c
Signed-off-by: William Roberts <william.c.roberts@intel.com>
Diffstat (limited to 'README')
-rw-r--r-- | README | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -26,6 +26,21 @@ From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk BOARD_SEPOLICY_DIRS += device/samsung/tuna/sepolicy +Additionally, OEMs can specify BOARD_SEPOLICY_M4DEFS to pass arbitrary m4 +definitions during the build. A definition consists of a string in the form +of macro-name=value. Spaces must NOT be present. This is useful for building modular +policies, policy generation, conditional file paths, etc. It is supported in +the following file types: + * All *.te and SE Linux policy files as passed to checkpolicy + * file_contexts + * service_contexts + * property_contexts + * keys.conf + +Example BoardConfig.mk Usage: +BOARD_SEPOLICY_M4DEFS += btmodule=foomatic \ + btdevice=/dev/gps + SPECIFIC POLICY FILE INFORMATION mac_permissions.xml: |