StrixOS/build_soong
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Update neverallow rules for init_first_stage" am: 4a241d0852 am: 86ce74fee9

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/build/soong/+/2633190

Change-Id: Ic863c5139b2db5059be6a718986b92d17b5e0437
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Nikita Ioffe
2023-06-22 11:50:13 +00:00
committed by Automerger Merge Worker
parent a9f6b0f326 86ce74fee9
commit ba7ff9cd0b
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
android/neverallow.go
View File

@@ -239,7 +239,9 @@ func createUncompressDexRules() []Rule {
func createInitFirstStageRules() []Rule { func createInitFirstStageRules() []Rule {
return []Rule{ return []Rule{
NeverAllow(). NeverAllow().
Without("name", "init_first_stage_defaults").
Without("name", "init_first_stage"). Without("name", "init_first_stage").
Without("name", "init_first_stage.microdroid").
With("install_in_root", "true"). With("install_in_root", "true").
Because("install_in_root is only for init_first_stage."), Because("install_in_root is only for init_first_stage."),
} }