Home | History | Annotate | only in /external/selinux
Up to higher level directory
NameDateSize
.gitignore05-Oct-2017277
.travis.yml05-Oct-20175.3K
Android.bp05-Oct-201748
Android.mk05-Oct-201774
checkpolicy/05-Oct-2017
CleanSpec.mk05-Oct-2017239
dbus/05-Oct-2017
gui/05-Oct-2017
libselinux/05-Oct-2017
libsemanage/05-Oct-2017
libsepol/05-Oct-2017
Makefile05-Oct-2017714
mcstrans/05-Oct-2017
MODULE_LICENSE_GPL05-Oct-20170
NOTICE05-Oct-2017106.1K
policycoreutils/05-Oct-2017
prebuilts/05-Oct-2017
python/05-Oct-2017
README05-Oct-20171.1K
README.android05-Oct-20171.7K
restorecond/05-Oct-2017
sandbox/05-Oct-2017
scripts/05-Oct-2017
secilc/05-Oct-2017
semodule-utils/05-Oct-2017

README

      1 Please submit all bug reports and patches to selinux (a] tycho.nsa.gov.
      2 Subscribe via selinux-join (a] tycho.nsa.gov.
      3 
      4 Build dependencies on Fedora:
      5 yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig xmlto redhat-rpm-config
      6 
      7 To build and install everything under a private directory, run:
      8 make DESTDIR=~/obj install install-pywrap
      9 
     10 To install as the default system libraries and binaries
     11 (overwriting any previously installed ones - dangerous!),
     12 on x86_64, run:
     13 make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
     14 or on x86 (32-bit), run:
     15 make install install-pywrap relabel
     16 
     17 This may render your system unusable if the upstream SELinux userspace
     18 lacks library functions or other dependencies relied upon by your
     19 distribution.  If it breaks, you get to keep both pieces.
     20 
     21 To install libsepol on macOS (mainly for policy analysis):
     22 cd libsepol; make DESTDIR=/usr/local PREFIX=/usr/local install
     23 
     24 This requires GNU coreutils (brew install coreutils).
     25 

README.android

      1 This fork of Android differs in the following ways:
      2  - README.android
      3  - All Android.mk and Android.bp files
      4  - ALL MODULE_LICENSE_* files
      5  - libselinux/include/selinux/android.h
      6  - libselinux/src/android/android.c
      7 
      8 All other changes should be upstreamed to selinux as
      9 Android no longer carries changes outside of those files.
     10 
     11 The upstream project can be found at:
     12 https://github.com/SELinuxProject/selinux
     13 
     14 Thus, since all changes are in separate files, updates merged from
     15 upstream should occur with no merge conflicts.
     16 
     17 This fork differs from upstream libselinux in at least the following ways:
     18 
     19 * The Android fork omits compiling many of the src files and specifies
     20   custom build configurations. The exact details, are encoded in the
     21   Android.bp and Android.mk files.
     22 
     23 * The SELinux policy files are all located in / rather than under
     24   /etc/selinux since /etc is not available in Android until /system
     25   is mounted and use fixed paths, not dependent on /etc/selinux/config.
     26 
     27 * The kernel policy file (sepolicy in Android, policy.N in Linux) does
     28   not include a version suffix since Android does not need to support
     29   booting multiple kernels.
     30 
     31 * The policy loading logic does not support automatic downgrading of
     32   the kernel policy file to a version known to the kernel, since this
     33   requires libsepol on the device and is only needed to support mixing
     34   and matching kernels and userspace easily.
     35 
     36 * restorecon functionality, including recursive restorecon, has been
     37   been upstreamed as selinux_restorecon(), but there are residual
     38   differences between it and selinux_android_restorecon().
     39 
     40 * Support for seapp_contexts, a new Android-specific SELinux
     41   configuration file has been added within android.c.
     42