StrixOS/build_soong
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Update neverallow rules for init_first_stage" am: 4a241d0852 am: 86ce74fee9 am: ba7ff9cd0b

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/build/soong/+/2633190

Change-Id: Ia385aae3a8d81258909f01263b0b19b8bbadf579
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Nikita Ioffe
2023-06-22 12:39:39 +00:00
committed by Automerger Merge Worker
parent 75aeb94fac ba7ff9cd0b
commit 132e6cbb99
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
android/neverallow.go
View File

@@ -239,7 +239,9 @@ func createUncompressDexRules() []Rule {
func createInitFirstStageRules() []Rule { func createInitFirstStageRules() []Rule {
return []Rule{ return []Rule{
NeverAllow(). NeverAllow().
Without("name", "init_first_stage_defaults").
Without("name", "init_first_stage"). Without("name", "init_first_stage").
Without("name", "init_first_stage.microdroid").
With("install_in_root", "true"). With("install_in_root", "true").
Because("install_in_root is only for init_first_stage."), Because("install_in_root is only for init_first_stage."),
} }