aboutsummaryrefslogtreecommitdiffstats
path: root/tools/README
diff options
context:
space:
mode:
authorRobert Craig <rpcraig@tycho.ncsc.mil>2014-03-25 13:51:59 -0400
committerRobert Craig <rpcraig@tycho.ncsc.mil>2014-03-25 13:51:59 -0400
commit4caa6d4b89ddb2d21f9ac31242ba15c8771b51d1 (patch)
tree3cdfecdf8a8b9185b69cbfb75345e0d607763532 /tools/README
parent18f2b80e6279a7642ed307f613281411955f699a (diff)
downloadandroid_external_sepolicy-4caa6d4b89ddb2d21f9ac31242ba15c8771b51d1.tar.gz
android_external_sepolicy-4caa6d4b89ddb2d21f9ac31242ba15c8771b51d1.tar.bz2
android_external_sepolicy-4caa6d4b89ddb2d21f9ac31242ba15c8771b51d1.zip
Update README concerning post_process_mac_perms script.
Change-Id: Iabda448d252d3b1ce19809c7f5de0dca3942f60c Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Diffstat (limited to 'tools/README')
-rw-r--r--tools/README13
1 files changed, 13 insertions, 0 deletions
diff --git a/tools/README b/tools/README
index 9b329f6..8a8dce1 100644
--- a/tools/README
+++ b/tools/README
@@ -28,6 +28,19 @@ insertkeys.py
mac_permissions.xml to public keys found in pem files. This
script is described further in the top-level sepolicy/README.
+post_process_mac_perms
+ A tool to help modify an existing mac_permissions.xml with additional app
+ certs not already found in that policy. This becomes useful when a directory
+ containing apps is searched and the certs from those apps are added to the
+ policy not already explicitly listed.
+
+ Usage:
+ post_process_mac_perms [-h] -s SEINFO -d DIR -f POLICY
+
+ -s SEINFO, --seinfo SEINFO seinfo tag for each generated stanza
+ -d DIR, --dir DIR Directory to search for apks
+ -f POLICY, --file POLICY mac_permissions.xml policy file
+
sepolicy-check
A tool for auditing a sepolicy file for any allow rule that grants
a given permission.