Home | History | Annotate | only in /external/selinux
Up to higher level directory
NameDateSize
.travis.yml22-Oct-20206.1K
Android.bp22-Oct-202081
checkpolicy/22-Oct-2020
CleanSpec.mk22-Oct-2020310
dbus/22-Oct-2020
gui/22-Oct-2020
libselinux/22-Oct-2020
libsemanage/22-Oct-2020
libsepol/22-Oct-2020
Makefile22-Oct-20201.1K
mcstrans/22-Oct-2020
MODULE_LICENSE_GPL22-Oct-20200
NOTICE22-Oct-2020106.1K
OWNERS22-Oct-202053
policycoreutils/22-Oct-2020
prebuilts/22-Oct-2020
python/22-Oct-2020
README22-Oct-20201.1K
README.android22-Oct-20201.7K
restorecond/22-Oct-2020
sandbox/22-Oct-2020
scripts/22-Oct-2020
secilc/22-Oct-2020
semodule-utils/22-Oct-2020

README

      1 Please submit all bug reports and patches to selinux (a] vger.kernel.org.
      2 Subscribe by sending "subscribe selinux" in the body of an email
      3 to majordomo (a] vger.kernel.org.
      4 
      5 Build dependencies on Fedora:
      6 yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python3-devel python3-setools swig xmlto redhat-rpm-config
      7 
      8 To build and install everything under a private directory, run:
      9 make DESTDIR=~/obj install install-pywrap
     10 
     11 To install as the default system libraries and binaries
     12 (overwriting any previously installed ones - dangerous!),
     13 on x86_64, run:
     14 make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
     15 or on x86 (32-bit), run:
     16 make install install-pywrap relabel
     17 
     18 This may render your system unusable if the upstream SELinux userspace
     19 lacks library functions or other dependencies relied upon by your
     20 distribution.  If it breaks, you get to keep both pieces.
     21 
     22 To install libsepol on macOS (mainly for policy analysis):
     23 cd libsepol; make PREFIX=/usr/local install
     24 
     25 This requires GNU coreutils (brew install coreutils).
     26 

README.android

      1 This fork of Android differs in the following ways:
      2  - README.android
      3  - All Android.mk and Android.bp files
      4  - ALL MODULE_LICENSE_* files
      5  - libselinux/include/selinux/android.h
      6  - libselinux/src/android/android.c
      7 
      8 All other changes should be upstreamed to selinux as
      9 Android no longer carries changes outside of those files.
     10 
     11 The upstream project can be found at:
     12 https://github.com/SELinuxProject/selinux
     13 
     14 Thus, since all changes are in separate files, updates merged from
     15 upstream should occur with no merge conflicts.
     16 
     17 This fork differs from upstream libselinux in at least the following ways:
     18 
     19 * The Android fork omits compiling many of the src files and specifies
     20   custom build configurations. The exact details, are encoded in the
     21   Android.bp and Android.mk files.
     22 
     23 * The SELinux policy files are all located in / rather than under
     24   /etc/selinux since /etc is not available in Android until /system
     25   is mounted and use fixed paths, not dependent on /etc/selinux/config.
     26 
     27 * The kernel policy file (sepolicy in Android, policy.N in Linux) does
     28   not include a version suffix since Android does not need to support
     29   booting multiple kernels.
     30 
     31 * The policy loading logic does not support automatic downgrading of
     32   the kernel policy file to a version known to the kernel, since this
     33   requires libsepol on the device and is only needed to support mixing
     34   and matching kernels and userspace easily.
     35 
     36 * restorecon functionality, including recursive restorecon, has been
     37   been upstreamed as selinux_restorecon(), but there are residual
     38   differences between it and selinux_android_restorecon().
     39 
     40 * Support for seapp_contexts, a new Android-specific SELinux
     41   configuration file has been added within android.c.
     42