From 11a9c2c7634c1523b892ae53575a7c8b6e016114 Mon Sep 17 00:00:00 2001 From: Nikita Ioffe Date: Wed, 21 Jun 2023 16:51:09 +0100 Subject: [PATCH] Update neverallow rules for init_first_stage We are introducing Microdroid-specific variant of the init_first_stage, and need to add init_first_stage_defaults and init_first_stage.microdroid to the neverallow rule. Bug: 287206497 Test: build com.android.virt APEX Change-Id: I88543256ab0479d4676865ebb1d16d9d39f1f455 --- android/neverallow.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/android/neverallow.go b/android/neverallow.go index f2e8c8534..41105e6b4 100644 --- a/android/neverallow.go +++ b/android/neverallow.go @@ -239,7 +239,9 @@ func createUncompressDexRules() []Rule { func createInitFirstStageRules() []Rule { return []Rule{ NeverAllow(). + Without("name", "init_first_stage_defaults"). Without("name", "init_first_stage"). + Without("name", "init_first_stage.microdroid"). With("install_in_root", "true"). Because("install_in_root is only for init_first_stage."), }