1 Star 0 Fork 1.6K

zyj-alex/security_selinux

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
克隆/下载
BUILD.gn 15.68 KB
一键复制 编辑 原始数据 按行查看 历史
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553
# Copyright (c) 2021-2022 北京万里红科技有限公司
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
import("//base/security/selinux/selinux.gni")
import("//base/startup/init/begetd.gni")
import("//build/ohos.gni")
SELINUX_ROOT_DIR = "//base/security/selinux"
THIRD_PARTY_SELINUX_DIR = "//third_party/selinux"
LIBSELINUX_ROOT_DIR = "$THIRD_PARTY_SELINUX_DIR/libselinux"
config("selinux_core_config") {
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"$LIBSELINUX_ROOT_DIR/include",
]
}
ohos_shared_library("libload_policy") {
output_name = "libload_policy"
sources = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/load_policy.c" ]
include_dirs = [
"$LIBSELINUX_ROOT_DIR/include",
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
]
deps = [
":libselinux_klog_static",
"$THIRD_PARTY_SELINUX_DIR:libselinux",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
install_enable = true
install_images = [
"system",
"ramdisk",
"updater",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_shared_library("librestorecon") {
output_name = "librestorecon"
sources = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/restorecon.c" ]
include_dirs = [
"$LIBSELINUX_ROOT_DIR/include",
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
]
public_configs = [ ":selinux_core_config" ]
deps = [ "$THIRD_PARTY_SELINUX_DIR:libselinux" ]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
install_enable = true
install_images = [
"system",
"ramdisk",
"updater",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_shared_library("libhap_restorecon") {
output_name = "libhap_restorecon"
sources =
[ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/hap_restorecon.cpp" ]
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"$LIBSELINUX_ROOT_DIR/include",
"$LIBSELINUX_ROOT_DIR/src",
"//third_party/FreeBSD",
]
public_configs = [ ":selinux_core_config" ]
deps = [
":libselinux_error_static",
":libselinux_hilog_static",
"$THIRD_PARTY_SELINUX_DIR:libselinux",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
install_enable = true
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_static_library("libselinux_error_static") {
output_name = "libselinux_error_static"
sources =
[ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_error.cpp" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
cflags = [
"-D_GNU_SOURCE",
"-w",
]
part_name = "selinux"
subsystem_name = "security"
}
ohos_static_library("libselinux_klog_static") {
output_name = "libselinux_klog_static"
sources =
[ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_klog.c" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
deps = [ "//third_party/bounds_checking_function:libsec_static" ]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
part_name = "selinux"
subsystem_name = "security"
}
ohos_static_library("libselinux_hilog_static") {
output_name = "libselinux_hilog_static"
sources = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_log.c" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
deps = [ "//third_party/bounds_checking_function:libsec_static" ]
external_deps = [ "hilog_native:libhilog" ]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
part_name = "selinux"
subsystem_name = "security"
}
if (!startup_init_with_param_base) {
inherited_configs = [
"//build/config/compiler:afdo",
"//build/config/compiler:afdo_optimize_size",
"//build/config/compiler:compiler",
"//build/config/compiler:compiler_arm_fpu",
"//build/config/compiler:compiler_arm_thumb",
"//build/config/compiler:chromium_code",
"//build/config/compiler:default_include_dirs",
"//build/config/compiler:default_optimization",
"//build/config/compiler:default_stack_frames",
"//build/config/compiler:default_symbols",
"//build/config/compiler:export_dynamic",
"//build/config/compiler:no_exceptions",
"//build/config/compiler:no_rtti",
"//build/config/compiler:runtime_library",
"//build/config/compiler:thin_archive",
"//build/config/sanitizers:default_sanitizer_flags",
]
}
source_set("libselinux_parameter_static") {
output_name = "libselinux_parameter_static"
sources = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/contexts_trie.c",
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_map.c",
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_parameter.c",
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/selinux_share_mem.c",
]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
if (!startup_init_with_param_base) {
ldflags = [ "-nostdlib" ]
configs -= inherited_configs
configs += [ "//build/config/compiler:compiler" ]
}
}
ohos_shared_library("libparaperm_checker") {
output_name = "libparaperm_checker"
sources =
[ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/param_checker.c" ]
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"$LIBSELINUX_ROOT_DIR/src",
"//third_party/bounds_checking_function/include",
]
public_configs = [ ":selinux_core_config" ]
deps = [
":libselinux_klog_static",
"$THIRD_PARTY_SELINUX_DIR:libselinux",
"//third_party/bounds_checking_function:libsec_static",
]
if (startup_init_with_param_base) {
deps += [ ":libselinux_parameter_static" ]
}
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
install_images = [
"system",
"updater",
]
part_name = "selinux"
subsystem_name = "security"
}
ohos_shared_library("libservice_checker") {
output_name = "libservice_checker"
sources =
[ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/src/service_checker.cpp" ]
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"$LIBSELINUX_ROOT_DIR/include",
"$LIBSELINUX_ROOT_DIR/src",
"//third_party/bounds_checking_function/include",
]
public_configs = [ ":selinux_core_config" ]
deps = [
":libselinux_error_static",
":libselinux_hilog_static",
"$THIRD_PARTY_SELINUX_DIR:libselinux",
"//third_party/bounds_checking_function:libsec_static",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
part_name = "selinux"
subsystem_name = "security"
}
ohos_executable("load_policy") {
install_enable = false
sources = [ "$SELINUX_ROOT_DIR/interfaces/tools/load_policy/load_policy.c" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
deps = [ ":libload_policy" ]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_executable("restorecon") {
install_enable = true
sources = [ "$SELINUX_ROOT_DIR/interfaces/tools/restorecon/restorecon.c" ]
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"//third_party/bounds_checking_function/include",
]
deps = [
":librestorecon",
"//third_party/bounds_checking_function:libsec_static",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_executable("hap_restorecon") {
install_enable = false
sources = [ "$SELINUX_ROOT_DIR/interfaces/tools/hap_restorecon/test.cpp" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
deps = [
":libhap_restorecon",
":libselinux_error_static",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_executable("param_check") {
install_enable = false
sources = [ "$SELINUX_ROOT_DIR/interfaces/tools/param_check/test.cpp" ]
include_dirs = [
"$SELINUX_ROOT_DIR/interfaces/policycoreutils/include",
"$LIBSELINUX_ROOT_DIR/include",
]
deps = [
":libparaperm_checker",
":libselinux_error_static",
"$THIRD_PARTY_SELINUX_DIR:libselinux",
]
if (startup_init_with_param_base) {
deps += [ ":libselinux_parameter_static" ]
}
cflags = [
"-D_GNU_SOURCE",
"-DTIME_DISPLAY",
"-Wall",
"-Werror",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
ohos_executable("service_check") {
install_enable = false
sources = [ "$SELINUX_ROOT_DIR/interfaces/tools/service_check/test.cpp" ]
include_dirs = [ "$SELINUX_ROOT_DIR/interfaces/policycoreutils/include" ]
deps = [
":libselinux_error_static",
":libservice_checker",
]
cflags = [
"-D_GNU_SOURCE",
"-Wall",
"-Werror",
]
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
subsystem_name = "security"
}
build_env = true
build_updater = false
debug_version = "disable"
updater_version = "disable"
action("build_policy") {
if (build_env) {
debug_version = "enable"
}
if (build_updater) {
updater_version = "enable"
}
inputs = exec_script("//build/scripts/find.py",
[ rebase_path("$SELINUX_ROOT_DIR/sepolicy") ],
"list lines")
if (selinux_build_path != "default") {
foreach(src, string_split(selinux_build_path, ":")) {
src = "//" + src
inputs += exec_script("//build/scripts/find.py",
[ rebase_path(src) ],
"list lines")
}
}
script = "$SELINUX_ROOT_DIR/scripts/build_policy.py"
args = [
"--dst-file",
rebase_path(target_out_dir + "/policy.31"),
"--tool-path",
rebase_path(root_build_dir + "/clang_x64/security/selinux/"),
"--source-root-dir",
rebase_path("//"),
"--policy_dir_list",
selinux_build_path,
"--debug-version",
debug_version,
"--updater-version",
updater_version,
]
deps = [
"$THIRD_PARTY_SELINUX_DIR:checkpolicy($host_toolchain)",
"$THIRD_PARTY_SELINUX_DIR:secilc($host_toolchain)",
]
outputs = [ target_out_dir + "/policy.31" ]
}
action("build_contexts") {
inputs = exec_script("//build/scripts/find.py",
[ rebase_path("$SELINUX_ROOT_DIR/sepolicy") ],
"list lines")
if (selinux_build_path != "default") {
foreach(src, string_split(selinux_build_path, ":")) {
src = "//" + src
inputs += exec_script("//build/scripts/find.py",
[ rebase_path(src) ],
"list lines")
}
}
script = "$SELINUX_ROOT_DIR/scripts/build_contexts.py"
args = [
"--dst-dir",
rebase_path(target_out_dir + "/"),
"--tool-path",
rebase_path(root_build_dir + "/clang_x64/security/selinux/"),
"--policy-file",
rebase_path(target_out_dir + "/policy.31"),
"--source-root-dir",
rebase_path("//"),
"--policy_dir_list",
selinux_build_path,
]
deps = [
":build_policy",
"$THIRD_PARTY_SELINUX_DIR:sefcontext_compile($host_toolchain)",
]
outputs = [
target_out_dir + "/file_contexts.bin",
target_out_dir + "/file_contexts",
target_out_dir + "/sehap_contexts",
target_out_dir + "/service_contexts",
target_out_dir + "/hdf_service_contexts",
target_out_dir + "/parameter_contexts",
]
}
copy("selinux_config") {
if (selinux_enforce) {
sources = [ "$SELINUX_ROOT_DIR/config/config.enforce" ]
} else {
sources = [ "$SELINUX_ROOT_DIR/config/config.permissive" ]
}
outputs = [ "$target_out_dir/config" ]
}
ohos_prebuilt_etc("build_sepolicy") {
deps = [ ":build_policy" ]
source = target_out_dir + "/policy.31"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/policy/"
}
ohos_prebuilt_etc("file_contexts_bin") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/file_contexts.bin"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/contexts/"
}
ohos_prebuilt_etc("config") {
deps = [ ":selinux_config" ]
source = target_out_dir + "/config"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/"
}
ohos_prebuilt_etc("sehap_contexts") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/sehap_contexts"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/contexts/"
}
ohos_prebuilt_etc("parameter_contexts") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/parameter_contexts"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/contexts/"
install_images = [
"system",
"updater",
]
}
ohos_prebuilt_etc("service_contexts") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/service_contexts"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/contexts/"
}
ohos_prebuilt_etc("hdf_service_contexts") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/hdf_service_contexts"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
relative_install_dir = "selinux/targeted/contexts/"
}
ohos_prebuilt_etc("file_contexts") {
deps = [ ":build_contexts" ]
source = target_out_dir + "/file_contexts"
license_file = "$SELINUX_ROOT_DIR/LICENSE"
part_name = "selinux"
# 此处不应该改变 file_contexts 的约定路径!
# 因为 OpenHarmony 的 e2fsdroid 无法支持五级系统目录,所以在此作出规避,
# 但是很显然这是不应当的。
#relative_install_dir = "selinux/targeted/contexts/files/"
relative_install_dir = "selinux/targeted/contexts/"
install_images = [
"system",
"updater",
]
}
group("selinux_group") {
if (build_selinux) {
deps = [
"//base/security/selinux:build_sepolicy",
"//base/security/selinux:config",
"//base/security/selinux:file_contexts",
"//base/security/selinux:file_contexts_bin",
"//base/security/selinux:hap_restorecon",
"//base/security/selinux:hdf_service_contexts",
"//base/security/selinux:load_policy",
"//base/security/selinux:param_check",
"//base/security/selinux:parameter_contexts",
"//base/security/selinux:restorecon",
"//base/security/selinux:sehap_contexts",
"//base/security/selinux:service_check",
"//base/security/selinux:service_contexts",
"//third_party/selinux:checkpolicy($host_toolchain)",
"//third_party/selinux:chkcon",
"//third_party/selinux:getenforce",
"//third_party/selinux:getfilecon",
"//third_party/selinux:getpidcon",
"//third_party/selinux:secilc($host_toolchain)",
"//third_party/selinux:sefcontext_compile($host_toolchain)",
"//third_party/selinux:selinux_check_access",
"//third_party/selinux:selinuxexeccon",
"//third_party/selinux:setenforce",
"//third_party/selinux:setfilecon",
]
}
}
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/zyj-alex/security_selinux.git
git@gitee.com:zyj-alex/security_selinux.git
zyj-alex
security_selinux
security_selinux
master

搜索帮助