StrixOS/build_soong
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Update neverallow rules for init_first_stage" am: 4a241d0852 am: 86ce74fee9 am: ba7ff9cd0b am: 132e6cbb99

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/build/soong/+/2633190

Change-Id: I05d90948d0fac2b839a5ebf8351132f1b521c44d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Nikita Ioffe
2023-06-22 13:24:54 +00:00
committed by Automerger Merge Worker
parent 6c2bc3c994 132e6cbb99
commit 64fd638c18
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
android/neverallow.go
View File

@@ -239,7 +239,9 @@ func createUncompressDexRules() []Rule {
func createInitFirstStageRules() []Rule {
return []Rule{
NeverAllow().
Without("name", "init_first_stage_defaults").
Without("name", "init_first_stage").
Without("name", "init_first_stage.microdroid").
With("install_in_root", "true").
Because("install_in_root is only for init_first_stage."),
}