replicant-vendor_replicant/sepolicy/sepolicy.mk

#
# This policy configuration will be used by all products that
# inherit from CM
#

BOARD_SEPOLICY_DIRS += \
    vendor/cm/sepolicy

BOARD_SEPOLICY_UNION += \
    file.te \
    file_contexts \
    fs_use \
    genfs_contexts \
    seapp_contexts \
    mac_permissions.xml
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`#`
			`# This policy configuration will be used by all products that`
			`# inherit from CM`
			`#`

selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`BOARD_SEPOLICY_DIRS += \`
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`vendor/cm/sepolicy`

selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`BOARD_SEPOLICY_UNION += \`
selinux: Fix asec mounting Change-Id: I92392f3d810dfaf8dfc35f5c9170178a651d28dc 2013-11-12 21:05:31 +00:00			`file.te \`
selinux: Add CM-specific file_contexts Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05 2013-11-06 03:00:16 +00:00			`file_contexts \`
sepolicy: f2fs: Allow fs_use_xattr Change-Id: I458d464598777fa06751dad0aa9cfd4d903a4de1 2013-11-10 21:01:44 +00:00			`fs_use \`
sepolicy: treat fuseblk as sdcard_external Allow fuse-mounted NTFS/exFAT file systems to be written to Change-Id: I1492914dd269a305e27aba58e61064d853adf2bc 2013-11-11 03:47:51 +00:00			`genfs_contexts \`
selinux: CM policies are now inserted last Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84 2013-11-05 22:19:33 +00:00			`seapp_contexts \`
sepolicy: Start CM Common sepolicy Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015 2013-08-15 20:08:41 +00:00			`mac_permissions.xml`