Commit 9d281d92 authored Oct 19, 2020 by Inseob Kim

Add BUILD_BROKEN_ENFORCE_SYSPROP_OWNER

In terms of sepolicy rules, every property should have an apporpriate
owner attribute, which can be one of: system_property_type,
product_property_type, or vendor_property_type. This will be enforced
for devices launching with S or later. Devices launching with R or
eariler can relax this by setting following under BoardConfig.mk:

BUILD_BROKEN_ENFORCE_SYSPROP_OWNER := true

See system/sepolicy/public/te_macros for more details.

Bug: 131162102
Test: system/sepolicy/tools/build_policies.sh
Change-Id: Iee05fc15beac1ccf61da4ea901a85b9d4068e0ca

parent 6a2135b6

core/board_config.mk

+1 −0

Original line number	Diff line number	Diff line
		@@ -114,6 +114,7 @@ _build_broken_var_list := \
		BUILD_BROKEN_DUP_RULES \
		BUILD_BROKEN_DUP_SYSPROP \
		BUILD_BROKEN_ELF_PREBUILT_PRODUCT_COPY_FILES \
		BUILD_BROKEN_ENFORCE_SYSPROP_OWNER \
		BUILD_BROKEN_MISSING_REQUIRED_MODULES \
		BUILD_BROKEN_OUTSIDE_INCLUDE_DIRS \
		BUILD_BROKEN_PREBUILT_ELF_FILES \