diff options
author | William Roberts <w.roberts@sta.samsung.com> | 2013-02-12 13:30:47 +0900 |
---|---|---|
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2013-03-21 02:55:49 +0000 |
commit | 15b3ceda5cd0fea1f0b5b19d4795d7290a75b39d (patch) | |
tree | 9f2f687d389699eb0f67fdf5398b5e57b659f170 /README | |
parent | acea73d5dc42c4475f4f474343041765b558c5d4 (diff) | |
download | sepolicy-15b3ceda5cd0fea1f0b5b19d4795d7290a75b39d.tar.gz |
Add BOARD_SEPOLICY_IGNORE
See README for further details.
Change-Id: I4599c7ecd5a552e38de89d0a9e496e047068fe05
Diffstat (limited to 'README')
-rw-r--r-- | README | 23 |
1 files changed, 21 insertions, 2 deletions
@@ -8,6 +8,7 @@ they are: 1. BOARD_SEPOLICY_REPLACE 2. BOARD_SEPOLICY_UNION 3. BOARD_SEPOLICY_DIRS +4. BOARD_SEPOLICY_IGNORE The variables should be set in the BoardConfig.mk file in the device or vendor directories. @@ -38,7 +39,9 @@ multiple times on the policy search path defined by BOARD_SEPOLICY_DIRS. eg.) if you specify shell.te in BOARD_SEPOLICY_REPLACE and BOARD_SEPOLICY_DIRS is set to "vendor/widget/common/sepolicy device/widget/x/sepolicy" and shell.te -appears in both locations, it is an error. +appears in both locations, it is an error. Unless it is in +BOARD_SEPOLICY_IGNORE to be filtered out. See BOARD_SEPOLICY_IGNORE +for more details. It is an error to specify the same file name in both BOARD_POLICY_REPLACE and BOARD_POLICY_UNION. @@ -46,7 +49,23 @@ BOARD_POLICY_REPLACE and BOARD_POLICY_UNION. It is an error to specify a BOARD_SEPOLICY_DIRS that has no entries when specifying BOARD_SEPOLICY_REPLACE. -Example Usage: +BOARD_SEPOLICY_IGNORE is a list of paths (directory + filename) of +files that are not to be included in the resulting policy. This list +is passed to filter-out to remove any paths you may want to ignore. This +is useful if you have numerous config directories that contain a file +and you want to NOT include a particular file in your resulting +policy file, either by UNION or REPLACE. +Eg.) Suppose the follwoing: + BOARD_SEPOLICY_DIRS := X Y + BOARD_SEPOLICY_REPLACE := A + BOARD_SEPOLICY_IGNORE := X/A + + Directories X and Y contain A. + + The resulting policy is created by using Y/A only, thus X/A was + ignored. + +Example BoardConfig.mk Usage: From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk BOARD_SEPOLICY_DIRS := \ |