| d48d54a3a103a001301c9decc4ba3a09cb9c2d12 |
|
06-Apr-2017 |
Martijn Coenen <maco@google.com> |
Modify checkfc to check (vnd|hw)service_manager_type.
added checkfc options 'l' and 'v' to verify hwservice_manager_type
and vndservice_manager_type on service context files, respectively.
The checkfc call to verify the new hwservice_contexts files will
be added together with hwservicemanager ACL CLs later.
Bug: 34454312
Bug: 36052864
Test: device boots, works
Change-Id: Ie3b56da30be47c95a6b05d1bc5e5805acb809783
/system/sepolicy/tools/checkfc.c
|
| 3e4632943de29dc99a239a99da9b45527c8d9ae9 |
|
08-Sep-2016 |
Janis Danisevskis <jdanis@google.com> |
fix lax service context lookup
Inform checkfc about new service label backend.
Test: bullhead builds
Bug: 31353148
Change-Id: I499da36108e67483a4f9a18fd8cc7c8f13419abd
/system/sepolicy/tools/checkfc.c
|
| 922b4e95220de78f18335a79de6188dd4f4f9911 |
|
15-Jan-2016 |
William Roberts <william.c.roberts@intel.com> |
checkfc: do not die on 0 length fc's
Checkfc was treating 0 size fc files as a fatal error.
An empty fc file should be treated as "nothing to check"
so long as the -e option is passed.
We add this option, so we don't allow empty file_context
files to pass CTS checking.
Change-Id: Ibca6bd948a13389e10c605d613acc48c5504443e
Signed-off-by: William Roberts <william.c.roberts@intel.com>
/system/sepolicy/tools/checkfc.c
|
| ad3cb39e54040e5a03328d8006f428579d1654e0 |
|
25-Sep-2015 |
William Roberts <william.c.roberts@intel.com> |
checkfc: add attribute test
Enable checkfc to check *_contexts against a set of valid attributes
which must be associated with all types in the contexts file that
is being checked.
Since it's imperative that checkfc knows which file its checking to
choose the proper attribute set, the -s option is introduced to
indicate the service_contexts file. The property_contexts file continues
to use the existing -p and file_contexts requires no specification, aka
it's the default.
Failure examples:
file_contexts:
Error: type "init" is not of set: "fs_type, dev_type, file_type"
service_contexts:
Error: type "init_exec" is not of set: "service_manager_type"
property_contexts:
Error: type "bluetooth_service" is not of set: "property_type"
Change-Id: I62077e4d0760858a9459e753e14dfd209868080f
Signed-off-by: William Roberts <william.c.roberts@intel.com>
/system/sepolicy/tools/checkfc.c
|
| 13b6b7e88f6ac006b53764b33348a73343742148 |
|
05-Aug-2015 |
Stephen Smalley <sds@tycho.nsa.gov> |
checkfc: add support for comparing two file_contexts files.
Extend checkfc to support comparing two file_contexts or
file_contexts.bin files. This is for use by the CTS
SELinuxHostTest to compare the AOSP general_file_contexts
with the device file_contexts.bin file.
Depends on I0fe63e0c7f11ae067b5aac2f468f7842e5d76986.
Change-Id: I2fff2f8cf87690a76219ddf4cf38939650f34782
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/system/sepolicy/tools/checkfc.c
|
| d98d26ef3c1fe9b44497ed4e2a1fcf66505092ba |
|
23-Jan-2013 |
Robert Craig <rpcraig@tycho.ncsc.mil> |
property_contexts checks added to checkfc.
Change-Id: If361ea93fabd343728196eed2663fd572ecaa70b
Signed-off-by: Robert Craig <rpcraig@tycho.ncsc.mil>
/system/sepolicy/tools/checkfc.c
|
| cdfb06f55394d68a7df1110d83070961a2cc52aa |
|
01-Nov-2012 |
Alice Chu <alice.chu@sta.samsung.com> |
Moved Android policy tools to tools directory
Change-Id: I57b0dd9f8071eae492020f410c87f465ba820711
/system/sepolicy/tools/checkfc.c
|