From a321b98cb8cd565136cfd5f9aa12b7e9ab858f2d Mon Sep 17 00:00:00 2001 From: ix5 Date: Mon, 25 Mar 2019 21:32:39 +0100 Subject: [PATCH] common: Force split sepolicy on all shippping APIs The sepolicy compiles correctly for both non- and full-treble devices and the last hurdle - PeripheralManager - is fully binderized now. Having only one configuration to build eases maintenance and reduces build errors that only occur when compiling with FULL_TREBLE (and thus split sepolicy). --- common.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/common.mk b/common.mk index 487e103cd..5f19dea02 100644 --- a/common.mk +++ b/common.mk @@ -26,6 +26,10 @@ DEVICE_PACKAGE_OVERLAYS += $(COMMON_PATH)/overlay PRODUCT_ENFORCE_RRO_TARGETS := \ framework-res +# Force split of sepolicy into /system/etc/selinux and (/system)/vendor/etc/selinux +# for all devices, regardless of shipping API level +PRODUCT_SEPOLICY_SPLIT_OVERRIDE := true + # Codecs Configuration PRODUCT_COPY_FILES += \ frameworks/av/media/libstagefright/data/media_codecs_google_audio.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_google_audio.xml \