a7y18lte-ubports/android_kernel_samsung_a7y18lte
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "security: defex: set Defex to Permissive status"

Browse Source 
This reverts commit 8dc78907ea.
This commit is contained in:
prashantpaddune 2020-04-06 19:40:02 +05:30
parent d8056bb93e
commit 35df3f88b7
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
security/defex_lsm/Makefile
View File

@ -42,9 +42,19 @@ ifeq ($(CACHES_ENABLE), true)
EXTRA_CFLAGS += -DDEFEX_CACHES_ENABLE
endif
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
obj-y += defex_debug.o
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_DEBUG_ENABLE
EXTRA_CFLAGS += -DDEFEX_SYSFS_ENABLE
endif
ifeq ($(SEC_BUILD_OPTION_VTS), true)
$(warning [DEFEX] VTS true $(SEC_BUILD_OPTION_VTS))
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_PED
else
$(warning [DEFEX] VTS false $(SEC_BUILD_OPTION_VTS))
endif
ifeq ($(CONFIG_SEC_FACTORY), y)
@ -52,10 +62,6 @@ EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_PED
endif
# Set Defex to Permissive
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_PED
ifneq ($(wildcard $(srctree)/$(src)/pack_rules.c),)
EXTRA_CFLAGS += -DDEFEX_USE_PACKED_RULES
hostprogs-y := pack_rules