aboutsummaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorRobert Craig <rpcraig@tycho.ncsc.mil>2013-03-27 08:35:39 -0400
committerGerrit Code Review <noreply-gerritcodereview@google.com>2013-03-27 20:34:29 +0000
commit7f2392eeb03eeb88f2699061f4adaeb1fcbd1de2 (patch)
treea6748591e630cceb90ef1d2ac7defeedb59d1c5f /README
parent65d4f44c1fd999d9cf9c4ef4dc65deb71bafcd8e (diff)
downloadandroid_external_sepolicy-7f2392eeb03eeb88f2699061f4adaeb1fcbd1de2.tar.gz
android_external_sepolicy-7f2392eeb03eeb88f2699061f4adaeb1fcbd1de2.tar.bz2
android_external_sepolicy-7f2392eeb03eeb88f2699061f4adaeb1fcbd1de2.zip
Expand insertkeys.py script to allow union of files.
Allow script to union mac_permissions.xml files specified using the BOARD_SEPOLICY_DIRS and BOARD_SEPOLICY_UNION constructs. Change-Id: I4fc65fd1ab4c612f25e966f030247e54a270b614 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Diffstat (limited to 'README')
-rw-r--r--README19
1 files changed, 9 insertions, 10 deletions
diff --git a/README b/README
index 135d377..debdf2e 100644
--- a/README
+++ b/README
@@ -55,7 +55,7 @@ is passed to filter-out to remove any paths you may want to ignore. This
is useful if you have numerous config directories that contain a file
and you want to NOT include a particular file in your resulting
policy file, either by UNION or REPLACE.
-Eg.) Suppose the follwoing:
+Eg.) Suppose the following:
BOARD_SEPOLICY_DIRS := X Y
BOARD_SEPOLICY_REPLACE := A
BOARD_SEPOLICY_IGNORE := X/A
@@ -87,21 +87,20 @@ mac_permissions.xml:
that is referenced in seapp_contexts.
This file can be replaced through BOARD_SEPOLICY_REPLACE containing the
- value "mac_permissions.xml", however, appending (UNION) does NOT exist
- and will cause a build time failure. It is important to note the final
- processed version of this file is stripped of comments and whitespace.
- This is to preserve space on the system.img. If one wishes to view it in
- a more human friendly format, the "tidy" or "xmllint" command will assist
- you.
+ value "mac_permissions.xml", or appended to by using the BOARD_SEPOLICY_UNION
+ variable. It is important to note the final processed version of this file
+ is stripped of comments and whitespace. This is to preserve space on the
+ system.img. If one wishes to view it in a more human friendly format,
+ the "tidy" or "xmllint" command will assist you.
TOOLING:
insertkeys.py
Is a helper script for mapping arbitrary tags in the signature stanzas of
mac_permissions.xml to public keys found in pem files. This script takes
- a mac_permissions.xml file and configuration file in order to operate.
+ a mac_permissions.xml file(s) and configuration file in order to operate.
Details of the configuration file (keys.conf) can be found in the subsection
- keys.conf. This script is also responsible for stipping the comments and
- whitespace from the xml file.
+ keys.conf. This tool is also responsible for stripping the comments and
+ whitespace during processing.
keys.conf
The keys.conf file is used for controlling the mapping of "tags" found in