Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 81742fbc authored by Matt Mower's avatar Matt Mower Committed by Dees Troy
Browse files

Only use SELinux tools from toolbox if not in busybox 

If busybox has SELinux support, we don't need toolbox to provide SELinux
specific tools. Check busybox for restorecon to see if SELinux support
is present and then adjust the tools built by toolbox based on this.

Change-Id: I30a2b036b97ac3e26510d5e0498c52d7a8af36e1
parent 55c75cad

Android.mk

+9 −3
Original line number Diff line number Diff line
@@ -310,11 +310,17 @@ include $(CLEAR_VARS) 
# Create busybox symlinks... gzip and gunzip are excluded because those need to link to pigz instead

BUSYBOX_LINKS := $(shell cat external/busybox/busybox-full.links)

exclude := tune2fs mke2fs mkdosfs gzip gunzip



# If busybox does not have restorecon, assume it does not have SELinux support.

# Then, let toolbox provide 'ls' so -Z is available to list SELinux contexts.

ifeq ($(TWHAVE_SELINUX), true)

	ifeq ($(filter restorecon, $(notdir $(BUSYBOX_LINKS))),)

		exclude += ls

	# toolbox will provide ls support with ls -Z capability for listing SELinux contexts

	endif

RECOVERY_BUSYBOX_SYMLINKS := $(addprefix $(TARGET_RECOVERY_ROOT_OUT)/sbin/,$(filter-out $(exclude),$(notdir $(BUSYBOX_LINKS))))

endif



RECOVERY_BUSYBOX_TOOLS := $(filter-out $(exclude), $(notdir $(BUSYBOX_LINKS)))

RECOVERY_BUSYBOX_SYMLINKS := $(addprefix $(TARGET_RECOVERY_ROOT_OUT)/sbin/, $(RECOVERY_BUSYBOX_TOOLS))

$(RECOVERY_BUSYBOX_SYMLINKS): BUSYBOX_BINARY := busybox

$(RECOVERY_BUSYBOX_SYMLINKS): $(LOCAL_INSTALLED_MODULE)

	@echo "Symlink: $@ -> $(BUSYBOX_BINARY)"

toolbox/Android.mk

+4 −1
Original line number Diff line number Diff line
@@ -7,8 +7,10 @@ TOOLS := \ 
	getprop \

	setprop



# If busybox does not have SELinux support, provide these tools with toolbox.

# Note that RECOVERY_BUSYBOX_TOOLS will be empty if TW_USE_TOOLBOX == true.

ifeq ($(TWHAVE_SELINUX), true)

	TOOLS += \

	TOOLS_FOR_SELINUX := \

		ls \

		getenforce \

		setenforce \
@@ -18,6 +20,7 @@ ifeq ($(TWHAVE_SELINUX), true) 
		getsebool \

		setsebool \

		load_policy

	TOOLS += $(filter-out $(RECOVERY_BUSYBOX_TOOLS), $(TOOLS_FOR_SELINUX))

endif



ifeq ($(TW_USE_TOOLBOX), true)