replicant-vendor_replicant/sepolicy/sepolicy.mk

#
# This policy configuration will be used by all products that
# inherit from CM
#

BOARD_SEPOLICY_DIRS += \
    vendor/cm/sepolicy

BOARD_SEPOLICY_UNION += \
    file.te \
    file_contexts \
    genfs_contexts \
    seapp_contexts \
    auditd.te \
    installd.te \
    netd.te \
    system.te \
    ueventd.te \
    vold.te \
    mac_permissions.xml
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`#`
			`# This policy configuration will be used by all products that`
			`# inherit from CM`
			`#`

selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`BOARD_SEPOLICY_DIRS += \`
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`vendor/cm/sepolicy`

selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`BOARD_SEPOLICY_UNION += \`
selinux: Fix asec mounting Change-Id: I92392f3d810dfaf8dfc35f5c9170178a651d28dc 2013-11-12 21:05:31 +00:00			`file.te \`
selinux: Add CM-specific file_contexts Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05 2013-11-06 03:00:16 +00:00			`file_contexts \`
sepolicy: treat fuseblk as sdcard_external Allow fuse-mounted NTFS/exFAT file systems to be written to Change-Id: I1492914dd269a305e27aba58e61064d853adf2bc 2013-11-11 03:47:51 +00:00			`genfs_contexts \`
selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`seapp_contexts \`
selinux: Add rules for the audit daemon Change-Id: I050a9ef39d58d2592d880d225d45eb64d8a40b7b 2014-11-09 17:20:54 +00:00			`auditd.te \`
cm: sepolicy: Allow ueventd to properly handle cpufreq changes * We need to allow relabeling since these files can pop in and out if the governor is changed. Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2 2014-04-05 21:05:13 +00:00			`installd.te \`
cm: policy for ipv6 tethering * Enable use of radish via netd for ipv6 tethering Change-Id: Ifa0e85686fc70f59c089ca40a78cea9935820185 2014-05-11 09:57:57 +00:00			`netd.te \`
sepolicy: Allow relabeling after wallpaper change Change-Id: I89220fae961f483dad8b92faaee9ed8fe6c8a7cf 2014-05-19 01:16:12 +00:00			`system.te \`
cm: sepolicy: Allow ueventd to properly handle cpufreq changes * We need to allow relabeling since these files can pop in and out if the governor is changed. Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2 2014-04-05 21:05:13 +00:00			`ueventd.te \`
sepolicy: allow vold to create files on external sdcard This is required for ASEC support. Vold can already create and access directories, but do not yet have the permission for files. Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901 2013-11-14 03:46:26 +00:00			`vold.te \`
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`mac_permissions.xml`