Home | History | Annotate | Download | only in selinux
      1 This fork of Android differs in the following ways:
      2  - README.android
      3  - All Android.mk and Android.bp files
      4  - ALL MODULE_LICENSE_* files
      5  - libselinux/include/selinux/android.h
      6  - libselinux/src/android/android.c
      7 
      8 All other changes should be upstreamed to selinux as
      9 Android no longer carries changes outside of those files.
     10 
     11 The upstream project can be found at:
     12 https://github.com/SELinuxProject/selinux
     13 
     14 Thus, since all changes are in separate files, updates merged from
     15 upstream should occur with no merge conflicts.
     16 
     17 This fork differs from upstream libselinux in at least the following ways:
     18 
     19 * The Android fork omits compiling many of the src files and specifies
     20   custom build configurations. The exact details, are encoded in the
     21   Android.bp and Android.mk files.
     22 
     23 * The SELinux policy files are all located in / rather than under
     24   /etc/selinux since /etc is not available in Android until /system
     25   is mounted and use fixed paths, not dependent on /etc/selinux/config.
     26 
     27 * The kernel policy file (sepolicy in Android, policy.N in Linux) does
     28   not include a version suffix since Android does not need to support
     29   booting multiple kernels.
     30 
     31 * The policy loading logic does not support automatic downgrading of
     32   the kernel policy file to a version known to the kernel, since this
     33   requires libsepol on the device and is only needed to support mixing
     34   and matching kernels and userspace easily.
     35 
     36 * restorecon functionality, including recursive restorecon, has been
     37   been upstreamed as selinux_restorecon(), but there are residual
     38   differences between it and selinux_android_restorecon().
     39 
     40 * Support for seapp_contexts, a new Android-specific SELinux
     41   configuration file has been added within android.c.
     42