File: README.android

package info (click to toggle)
android-platform-external-libselinux 8.1.0+r23-2
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, buster, sid
  • size: 33,252 kB
  • sloc: ansic: 142,533; python: 23,929; makefile: 1,760; yacc: 1,367; sh: 1,108; lex: 448; xml: 176
file content (41 lines) | stat: -rw-r--r-- 1,719 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
This fork of Android differs in the following ways:
 - README.android
 - All Android.mk and Android.bp files
 - ALL MODULE_LICENSE_* files
 - libselinux/include/selinux/android.h
 - libselinux/src/android/android.c

All other changes should be upstreamed to selinux as
Android no longer carries changes outside of those files.

The upstream project can be found at:
https://github.com/SELinuxProject/selinux

Thus, since all changes are in separate files, updates merged from
upstream should occur with no merge conflicts.

This fork differs from upstream libselinux in at least the following ways:

* The Android fork omits compiling many of the src files and specifies
  custom build configurations. The exact details, are encoded in the
  Android.bp and Android.mk files.

* The SELinux policy files are all located in / rather than under
  /etc/selinux since /etc is not available in Android until /system
  is mounted and use fixed paths, not dependent on /etc/selinux/config.

* The kernel policy file (sepolicy in Android, policy.N in Linux) does
  not include a version suffix since Android does not need to support
  booting multiple kernels.

* The policy loading logic does not support automatic downgrading of
  the kernel policy file to a version known to the kernel, since this
  requires libsepol on the device and is only needed to support mixing
  and matching kernels and userspace easily.

* restorecon functionality, including recursive restorecon, has been
  been upstreamed as selinux_restorecon(), but there are residual
  differences between it and selinux_android_restorecon().

* Support for seapp_contexts, a new Android-specific SELinux
  configuration file has been added within android.c.