aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorWilliam Roberts <w.roberts@sta.samsung.com>2013-02-12 13:30:47 +0900
committerGerrit Code Review <noreply-gerritcodereview@google.com>2013-03-21 02:55:49 +0000
commit15b3ceda5cd0fea1f0b5b19d4795d7290a75b39d (patch)
tree9f2f687d389699eb0f67fdf5398b5e57b659f170 /README
parentacea73d5dc42c4475f4f474343041765b558c5d4 (diff)
downloadsepolicy-15b3ceda5cd0fea1f0b5b19d4795d7290a75b39d.tar.gz
Add BOARD_SEPOLICY_IGNORE
See README for further details. Change-Id: I4599c7ecd5a552e38de89d0a9e496e047068fe05
Diffstat (limited to 'README')
-rw-r--r--README23
1 files changed, 21 insertions, 2 deletions
diff --git a/README b/README
index 5cba383..3cdd01a 100644
--- a/README
+++ b/README
@@ -8,6 +8,7 @@ they are:
1. BOARD_SEPOLICY_REPLACE
2. BOARD_SEPOLICY_UNION
3. BOARD_SEPOLICY_DIRS
+4. BOARD_SEPOLICY_IGNORE
The variables should be set in the BoardConfig.mk file in
the device or vendor directories.
@@ -38,7 +39,9 @@ multiple times on the policy search path defined by BOARD_SEPOLICY_DIRS.
eg.) if you specify shell.te in BOARD_SEPOLICY_REPLACE and
BOARD_SEPOLICY_DIRS is set to
"vendor/widget/common/sepolicy device/widget/x/sepolicy" and shell.te
-appears in both locations, it is an error.
+appears in both locations, it is an error. Unless it is in
+BOARD_SEPOLICY_IGNORE to be filtered out. See BOARD_SEPOLICY_IGNORE
+for more details.
It is an error to specify the same file name in both
BOARD_POLICY_REPLACE and BOARD_POLICY_UNION.
@@ -46,7 +49,23 @@ BOARD_POLICY_REPLACE and BOARD_POLICY_UNION.
It is an error to specify a BOARD_SEPOLICY_DIRS that has no entries when
specifying BOARD_SEPOLICY_REPLACE.
-Example Usage:
+BOARD_SEPOLICY_IGNORE is a list of paths (directory + filename) of
+files that are not to be included in the resulting policy. This list
+is passed to filter-out to remove any paths you may want to ignore. This
+is useful if you have numerous config directories that contain a file
+and you want to NOT include a particular file in your resulting
+policy file, either by UNION or REPLACE.
+Eg.) Suppose the follwoing:
+ BOARD_SEPOLICY_DIRS := X Y
+ BOARD_SEPOLICY_REPLACE := A
+ BOARD_SEPOLICY_IGNORE := X/A
+
+ Directories X and Y contain A.
+
+ The resulting policy is created by using Y/A only, thus X/A was
+ ignored.
+
+Example BoardConfig.mk Usage:
From the Tuna device BoardConfig.mk, device/samsung/tuna/BoardConfig.mk
BOARD_SEPOLICY_DIRS := \