diff --git a/Android.bp b/Android.bp index df1e2646f..0ca82a6db 100644 --- a/Android.bp +++ b/Android.bp @@ -865,6 +865,9 @@ precompiled_se_policy_binary { "sepolicy_neverallows", "sepolicy_neverallows_vendor", ], + dist: { + targets: ["base-sepolicy-files-for-mapping"], + }, } // policy for recovery @@ -933,6 +936,9 @@ se_policy_binary { name: "base_plat_sepolicy", srcs: [":base_plat_sepolicy.cil"], installable: false, + dist: { + targets: ["base-sepolicy-files-for-mapping"], + }, } se_policy_conf { @@ -1003,6 +1009,9 @@ se_policy_cil { filter_out: [":reqd_policy_mask.cil"], secilc_check: false, installable: false, + dist: { + targets: ["base-sepolicy-files-for-mapping"], + }, } se_policy_conf { diff --git a/treble_sepolicy_tests_for_release.mk b/treble_sepolicy_tests_for_release.mk index 011001b87..6a56d58f3 100644 --- a/treble_sepolicy_tests_for_release.mk +++ b/treble_sepolicy_tests_for_release.mk @@ -85,6 +85,9 @@ $(built_$(version)_plat_sepolicy): $($(version)_plat_policy.conf) $(HOST_OUT_EXE $(hide) cat $(PRIVATE_ADDITIONAL_CIL_FILES) >> $@ $(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -c $(POLICYVERS) $(PRIVATE_NEVERALLOW_ARG) $@ -o $@ -f /dev/null +# TODO(b/214336258): move to Soong +$(call dist-for-goals,base-sepolicy-files-for-mapping,$(built_$(version)_plat_sepolicy):$(version)_plat_sepolicy) + $(version)_plat_policy.conf := # $(version)_compat - the current plat_sepolicy.cil built with the compatibility file