Can you create a patch in a standard format? Either upload to AOSP using
"repo upload" or use "git diff" and add the output to this email thread.

On Wed, Jul 17, 2019 at 11:23 AM Shilesh Babu <[email protected]>
wrote:

> Hi Jeffrey,
> Could you plz check my service and policy adding part to aosp.
> Thanks.
>
> On Wed, Jul 17, 2019 at 10:18 PM Shilesh Babu <[email protected]>
> wrote:
> >
> > Hi Jeffrey,
> > if i remove these below lines from aosp its working fine only facing
> > issue while adding newtestapp service, i think the way adding new
> > service in aosp that might be a problem.
> > following this docs for adding new service
> > ///https://source.android.com/security/selinux/device-policy
> >
> > service newtestapp /system/bin/newtestapp   // added in
> > aosp-neo-n1/system/core/rootdir/init.rc
> > class core
> >
> > type newtestapp, domain;               // added in
> > aosp-neo-n1/device/qcom/sepolicy/private/newtestapp.te
> > type newtestapp_exec, exec_type, file_type;
> > init_daemon_domain(newtestapp)
> >
> > /system/bin/newtestapp   u:object_r:newtestapp_exec:s0  //added in
> > aosp-neo-n1/device/qcom/sepolicy/private/file_contexts
> >
> > On Wed, Jul 17, 2019 at 10:07 PM Jeffrey Vander Stoep <[email protected]>
> wrote:
> > >
> > > Can you repo upload your change to aosp for review?
> > >
> > > On Wed, Jul 17, 2019 at 9:25 AM Shilesh Babu <[email protected]>
> wrote:
> > >>
> > >> Hi Jeffrey,
> > >> Thanks for your response!!
> > >> Now I am adding new service in background
> > >> like ..
> > >>
> > >>  service newtestapp /system/bin/newtestapp
> > >>    // added in aosp-neo-n1/system/core/rootdir/init.rc
> > >> class core
> > >>
> > >> # newtestapp service
> > >>               // added in
> > >> aosp-neo-n1/device/qcom/sepolicy/private/newtestapp.te
> > >> type newtestapp, domain;
> > >> type newtestapp_exec, exec_type, file_type;
> > >> init_daemon_domain(newtestapp)
> > >>
> > >> /system/bin/newtestapp   u:object_r:newtestapp_exec:s0
> > >>  //added in aosp-neo-n1/device/qcom/sepolicy/private/file_contexts
> > >>
> > >> ---->But while building the aosp getting the an
> > >>
> error...................................................................................................
> > >>
> > >> [  0% 25/4326] build
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >> FAILED:
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >> /bin/bash -c "(ASAN_OPTIONS=detect_leaks=0
> > >> out/host/linux-x86/bin/checkpolicy -M -C -c         30 -o
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_policy.conf
> > >> ) && (cat   system/sepolicy/private/technical_debt.cil   >>
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >> ) && (out/host/linux-x86/bin/secilc -M true -G -c 30
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >> -o /dev/null -f /dev/null )"
> > >> out/host/linux-x86/bin/checkpolicy:  loading policy configuration from
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_policy.conf
> > >> out/host/linux-x86/bin/checkpolicy:  policy configuration loaded
> > >> out/host/linux-x86/bin/checkpolicy:  writing CIL to
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> > >> neverallow check failed at
> > >>
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil:4760
> > >> from system/sepolicy/public/domain.te:668
> > >>   (neverallow base_typeattr_55 base_typeattr_56 (file (execute
> > >> execute_no_trans entrypoint)))
> > >>     <root>
> > >>     allow at
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil:13229
> > >>       (allow newtestapp newtestapp_exec (file (read getattr map
> > >> execute entrypoint open)))
> > >>
> > >> Failed to generate binary
> > >> Failed to build policydb
> > >> [  0% 26/4326] target thumb C++: libqcrilFramework <=
> > >> vendor/qcom/proprietary/qcril-hal/framework/src/Looper.cpp
> > >> [  0% 27/4326] target thumb C++: libqcrilFramework <=
> > >> vendor/qcom/proprietary/qcril-hal/framework/src/Message.cpp
> > >> [  0% 28/4326] build
> > >> out/target/product/N1/obj/ETC/sepolicy.recovery_intermediates/sepolicy
> > >> device/qcom/sepolicy/msm8909/hal-server.te:37:WARNING 'unrecognized
> > >> character' at token '�' on line 66961:
> > >> typeattribute hal-server  hal_drm_server;
> > >> typeattribute hal-server  hal_drm;
> > >> device/qcom/sepolicy/msm8909/hal-server.te:37:WARNING 'unrecognized
> > >> character' at token '�' on line 66961:
> > >> typeattribute hal-server  hal_drm_server;
> > >> typeattribute hal-server  hal_drm;
> > >> device/qcom/sepolicy/msm8909/hal-server.te:37:WARNING 'unrecognized
> > >> character' at token '�' on line 66961:
> > >> typeattribute hal-server  hal_drm_server;
> > >> typeattribute hal-server  hal_drm;
> > >> device/qcom/sepolicy/msm8909/hal-server.te:37:WARNING 'unrecognized
> > >> character' at token '�' on line 66961:
> > >> typeattribute hal-server  hal_drm_server;
> > >> typeattribute hal-server  hal_drm;
> > >> out/host/linux-x86/bin/checkpolicy:  loading policy configuration from
> > >>
> out/target/product/N1/obj/ETC/sepolicy.recovery_intermediates/sepolicy.recovery.conf
> > >> out/host/linux-x86/bin/checkpolicy:  policy configuration loaded
> > >> out/host/linux-x86/bin/checkpolicy:  writing binary representation
> > >> (version 30) to
> > >>
> out/target/product/N1/obj/ETC/sepolicy.recovery_intermediates/sepolicy.tmp
> > >> [  0% 29/4326] Dexpreopt Jar: NWYConfig
> > >>
> (out/target/product/N1/obj/JAVA_LIBRARIES/NWYConfig_intermediates/oat/arm/javalib.odex)
> > >> [  0% 30/4326] build out/target/product/N1/emmc_appsboot.mbn
> > >> make: Entering directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/bootable/bootloader/lk'
> > >> make[1]: Entering directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/bootable/bootloader/lk'
> > >> including app/aboot dev/fbcon dev/gcdb/display dev/keys
> > >> dev/pmic/pm8x41 dev/pmic/pmi8994 dev/qpnp_haptic dev/vib lib/debug
> > >> lib/heap lib/libc lib/libfdt lib/openssl lib/ptable
> > >> including lib/openssl/crypto lib/zlib_inflate
> > >> generating
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/config.h
> > >> generating
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/system-onesegment.ld
> > >> linking
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk
> > >> ../../../prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/arm-eabi-ld:
> > >> warning:
> /home/shilesh/ather_source/source/aosp-neo-n1/prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/../lib/gcc/arm-eabi/4.8/libgcc.a(bpabi.o)
> > >> uses 32-bit enums yet the output is to use variable-size enums; use of
> > >> enum values across objects may fail
> > >> ../../../prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/arm-eabi-ld:
> > >> warning:
> /home/shilesh/ather_source/source/aosp-neo-n1/prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/../lib/gcc/arm-eabi/4.8/libgcc.a(_divdi3.o)
> > >> uses 32-bit enums yet the output is to use variable-size enums; use of
> > >> enum values across objects may fail
> > >> ../../../prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/arm-eabi-ld:
> > >> warning:
> /home/shilesh/ather_source/source/aosp-neo-n1/prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/../lib/gcc/arm-eabi/4.8/libgcc.a(_udivdi3.o)
> > >> uses 32-bit enums yet the output is to use variable-size enums; use of
> > >> enum values across objects may fail
> > >> generating image:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.bin
> > >> generating listing:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.lst
> > >>    text       data        bss        dec        hex    filename
> > >>  368948     224632     202456     796036      c2584
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk
> > >> ../../../prebuilts/gcc/linux-x86/arm/arm-eabi-4.8/bin/arm-eabi-objcopy
> > >> -O binary
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.bin
> > >> generating listing:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.debug.lst
> > >> generating symbols:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.sym
> > >> generating size map:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk.size
> > >> generating stripped elf:
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk_s.elf
> > >> cp -f
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/build-msm8909/lk_s.elf
> > >>
> ../../../out/target/product/N1/obj/EMMC_BOOTLOADER_OBJ/../../emmc_appsboot.mbn
> > >> make[1]: Leaving directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/bootable/bootloader/lk'
> > >> make: Leaving directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/bootable/bootloader/lk'
> > >> [  0% 31/4326] build out/target/product/N1/obj/kernel/msm-3.18/usr
> > >> make: Entering directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/kernel/msm-3.18'
> > >> make[1]: Entering directory
> > >>
> '/home/shilesh/ather_source/source/aosp-neo-n1/out/target/product/N1/obj/kernel/msm-3.18'
> > >>   GEN     ./Makefile
> > >> arch/arm/configs/msm8909_N1_defconfig:599:warning: override:
> > >> reassigning to symbol MEMCG
> > >> arch/arm/configs/msm8909_N1_defconfig:600:warning: override:
> > >> reassigning to symbol MEMCG_SWAP
> > >> #
> > >> # configuration written to .config
> > >> #
> > >> make[1]: Leaving directory
> > >>
> '/home/shilesh/ather_source/source/aosp-neo-n1/out/target/product/N1/obj/kernel/msm-3.18'
> > >> make: Leaving directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/kernel/msm-3.18'
> > >> make: Entering directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/kernel/msm-3.18'
> > >> make[1]: Entering directory
> > >>
> '/home/shilesh/ather_source/source/aosp-neo-n1/out/target/product/N1/obj/kernel/msm-3.18'
> > >>   CHK     include/generated/uapi/linux/version.h
> > >> make[1]: Leaving directory
> > >>
> '/home/shilesh/ather_source/source/aosp-neo-n1/out/target/product/N1/obj/kernel/msm-3.18'
> > >> make: Leaving directory
> > >> '/home/shilesh/ather_source/source/aosp-neo-n1/kernel/msm-3.18'
> > >> [  0% 32/4326] target Java: SnapdragonCamera
> > >> (out/target/common/obj/APPS/SnapdragonCamera_intermediates/classes)
> > >> ninja: build stopped: subcommand failed.
> > >> 21:33:51 ninja failed with: exit status 1
> > >>
> > >> #### failed to build some targets (05:39 (mm:ss)) ####
> > >>
> > >>
> > >> ==============================================
> > >>               Build finished !
> > >> ==============================================
> > >>
> > >> shilesh@shilesh-VirtualBox:~/ather_source/source/aosp-neo-n1$
> > >>
> > >> Could you please tell me, do i am doing anything wrong while added new
> > >> service ??
> > >>
> > >> On Wed, Jul 17, 2019 at 1:19 AM Jeffrey Vander Stoep <
> [email protected]> wrote:
> > >> >
> > >> > See https://source.android.com/security/selinux/device-policy
> > >> >
> > >> > On Tue, Jul 16, 2019 at 11:22 AM Shilesh Babu <
> [email protected]> wrote:
> > >> >>
> > >> >> Hi guys,
> > >> >> I am not able to add service properly in init.rc, could you please
> share any information like how to add and crate selinux policy.
> > >> >> I am doing.....
> > >> >> service testapp /system/bin/testapp //adding in init.rc
> > >> >>
> > >> >> Created policy in /device/../sepolicy/testapp.te
> > >> >>
> > >> >> Working on Android 8, please let me know if you have any inputs.
> > >> >>
> > >> >> On Mon, Jul 15, 2019, 11:40 PM 'Dan Willemsen' via Android
> Building <[email protected]> wrote:
> > >> >>>
> > >> >>> It looks like you've got some custom sepolicy that is violating
> neverallow rules (
> https://source.android.com/security/selinux/customize#neverallow):
> > >> >>>
> > >> >>> neverallow check failed at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:4265
> > >> >>>   (neverallow base_typeattr_55_27_0 base_typeattr_56_27_0 (file
> (execute execute_no_trans entrypoint)))
> > >> >>>     <root>
> > >> >>>     allow at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:10748
> > >> >>>       (allow newtestapp newtestapp_exec (file (read getattr map
> execute entrypoint open)))
> > >> >>>
> > >> >>> neverallow check failed at
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil:4754
> from system/sepolicy/public/domain.te:668
> > >> >>>   (neverallow base_typeattr_55 base_typeattr_56 (file (execute
> execute_no_trans entrypoint)))
> > >> >>>     <root>
> > >> >>>     allow at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:10748
> > >> >>>       (allow newtestapp newtestapp_exec (file (read getattr map
> execute entrypoint open)))
> > >> >>>
> > >> >>> You'll probably want to remove or limit the execute / entrypoint
> allows for newtestapp -- see any comments around
> system/sepolicy/public/domain.te:668 for more details.
> > >> >>>
> > >> >>> - Dan
> > >> >>>
> > >> >>> On Mon, Jul 15, 2019 at 9:31 AM Shilesh Babu <
> [email protected]> wrote:
> > >> >>>>
> > >> >>>> Hi Kun Li,
> > >> >>>> I am facing same issue could you plz suggest anything????
> > >> >>>>
> > >> >>>> system/core/liblog/include/log/log_main.h:240:52: note: expanded
> from macro 'ALOGE'
> > >> >>>> #define ALOGE(...) ((void)ALOG(LOG_ERROR, LOG_TAG, __VA_ARGS__))
> > >> >>>>                                                    ^~~~~~~~~~~
> > >> >>>> system/core/liblog/include/log/log_main.h:306:67: note: expanded
> from macro 'ALOG'
> > >> >>>> #define ALOG(priority, tag, ...) LOG_PRI(ANDROID_##priority,
> tag, __VA_ARGS__)
> > >> >>>>
>  ^~~~~~~~~~~
> > >> >>>> system/core/liblog/include/log/log_main.h:70:69: note: expanded
> from macro 'LOG_PRI'
> > >> >>>> #define LOG_PRI(priority, tag, ...) android_printLog(priority,
> tag, __VA_ARGS__)
> > >> >>>>
>    ^~~~~~~~~~~
> > >> >>>> system/core/liblog/include/log/log_main.h:61:34: note: expanded
> from macro 'android_printLog'
> > >> >>>>   __android_log_print(prio, tag, __VA_ARGS__)
> > >> >>>>                                  ^~~~~~~~~~~
> > >> >>>>
> vendor/qcom/proprietary/mm-still/codec_v1/omx/test/qomx_jpeg_enc_test.c:849:55:
> warning: unused parameter 'hComponent' [-Wunused-parameter]
> > >> >>>> OMX_ERRORTYPE omx_test_enc_ebd(OMX_OUT OMX_HANDLETYPE hComponent,
> > >> >>>>                                                       ^
> > >> >>>>
> vendor/qcom/proprietary/mm-still/codec_v1/omx/test/qomx_jpeg_enc_test.c:850:59:
> warning: unused parameter 'pBuffer' [-Wunused-parameter]
> > >> >>>>   OMX_OUT OMX_PTR pAppData, OMX_OUT OMX_BUFFERHEADERTYPE*
> pBuffer)
> > >> >>>>                                                           ^
> > >> >>>>
> vendor/qcom/proprietary/mm-still/codec_v1/omx/test/qomx_jpeg_enc_test.c:895:55:
> warning: unused parameter 'hComponent' [-Wunused-parameter]
> > >> >>>> OMX_ERRORTYPE omx_test_enc_fbd(OMX_OUT OMX_HANDLETYPE hComponent,
> > >> >>>>                                                       ^
> > >> >>>>
> vendor/qcom/proprietary/mm-still/codec_v1/omx/test/qomx_jpeg_enc_test.c:945:64:
> warning: unused parameter 'hComponent' [-Wunused-parameter]
> > >> >>>> OMX_ERRORTYPE omx_test_enc_event_handler(OMX_IN OMX_HANDLETYPE
> hComponent,
> > >> >>>>                                                                ^
> > >> >>>>
> vendor/qcom/proprietary/mm-still/codec_v1/omx/test/qomx_jpeg_enc_test.c:950:18:
> warning: unused parameter 'pEventData' [-Wunused-parameter]
> > >> >>>>   OMX_IN OMX_PTR pEventData)
> > >> >>>>                  ^
> > >> >>>> 9 warnings generated.
> > >> >>>> [  8% 372/4315] Copy: out/target/product/N1/obj/lib/libmmjpeg.so
> > >> >>>> [  8% 373/4315] build
> out/target/product/N1/obj/SHARED_LIBRARIES/libmmjpeg_intermediates/libmmjpeg.so.toc
> > >> >>>> [  8% 374/4315] Install:
> out/target/product/N1/vendor/lib/libmmjpeg.so
> > >> >>>> [  8% 375/4315] Copy:
> out/target/product/N1/obj/lib/libmmjpeg.so.toc
> > >> >>>> [  8% 376/4315] target Executable: mm-qomx-ienc-test
> (out/target/product/N1/obj/EXECUTABLES/mm-qomx-ienc-test_intermediates/LINKED/mm-qomx-ienc-test)
> > >> >>>> [  8% 377/4315] target SharedLib: libmmqjpeg_codec
> (out/target/product/N1/obj/SHARED_LIBRARIES/libmmqjpeg_codec_intermediates/LINKED/libmmqjpeg_codec.so)
> > >> >>>> [  8% 378/4315] target Pack Relocations: libmmqjpeg_codec
> (out/target/product/N1/obj/SHARED_LIBRARIES/libmmqjpeg_codec_intermediates/PACKED/libmmqjpeg_codec.so)
> > >> >>>> [  8% 379/4315] target Unpacked: mm-qomx-ienc-test
> (out/target/product/N1/obj/EXECUTABLES/mm-qomx-ienc-test_intermediates/PACKED/mm-qomx-ienc-test)
> > >> >>>> [  8% 380/4315] target Symbolic: libmmqjpeg_codec
> (out/target/product/N1/symbols/vendor/lib/libmmqjpeg_codec.so)
> > >> >>>> [  8% 381/4315] target Symbolic: mm-qomx-ienc-test
> (out/target/product/N1/symbols/system/bin/mm-qomx-ienc-test)
> > >> >>>> [  8% 382/4315] build
> out/target/product/N1/obj/ETC/precompiled_sepolicy_intermediates/precompiled_sepolicy
> > >> >>>> FAILED:
> out/target/product/N1/obj/ETC/precompiled_sepolicy_intermediates/precompiled_sepolicy
> > >> >>>> /bin/bash -c "out/host/linux-x86/bin/secilc -M true -G -c 30
>
>  
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> out/target/product/N1/obj/ETC/27.0.cil_intermediates/27.0.cil
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil
> -o
> out/target/product/N1/obj/ETC/precompiled_sepolicy_intermediates/precompiled_sepolicy
> -f /dev/null"
> > >> >>>> neverallow check failed at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:4265
> > >> >>>>   (neverallow base_typeattr_55_27_0 base_typeattr_56_27_0 (file
> (execute execute_no_trans entrypoint)))
> > >> >>>>     <root>
> > >> >>>>     allow at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:10748
> > >> >>>>       (allow newtestapp newtestapp_exec (file (read getattr map
> execute entrypoint open)))
> > >> >>>>
> > >> >>>> neverallow check failed at
> out/target/product/N1/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil:4754
> from system/sepolicy/public/domain.te:668
> > >> >>>>   (neverallow base_typeattr_55 base_typeattr_56 (file (execute
> execute_no_trans entrypoint)))
> > >> >>>>     <root>
> > >> >>>>     allow at
> out/target/product/N1/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:10748
> > >> >>>>       (allow newtestapp newtestapp_exec (file (read getattr map
> execute entrypoint open)))
> > >> >>>>
> > >> >>>> Failed to generate binary
> > >> >>>> Failed to build policydb
> > >> >>>>
> > >> >>>>
> > >> >>>>
> > >> >>>>
> > >> >>>>
> > >> >>>>
> > >> >>>> On Tuesday, November 7, 2017 at 9:27:49 PM UTC+5:30, Paul Chang
> wrote:
> > >> >>>>>
> > >> >>>>> You should delete this rule from nonplat_sepolicy.cil:
> > >> >>>>> allow domain sysfs_qemu_trace (file (ioctl read write getattr
> lock append map open))
> > >> >>>>>
> > >> >>>>> 2017-10-13 10:47 GMT+08:00 Kun Li <
> [email protected]>:
> > >> >>>>>>
> > >> >>>>>> I met sepolicy error when build latest android O code with
> car_emu_x86_64-userdebug:
> > >> >>>>>> ------------------
> > >> >>>>>> [ 82% 60943/73832] build
> out/target/product/.-x86_64/obj/ETC/sepolicy_intermediates/sepolicy
> > >> >>>>>> FAILED:
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy
> > >> >>>>>> /bin/bash -c "(out/host/linux-x86/bin/secilc -m -M true -G -c
> 30
> out/target/product/car-x86_64/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil
> out/target/product/car-x86_64/obj/ETC/10000.0.cil_intermediates/10000.0.cil
> out/target/product/car-x86_64/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil
> -o
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.tmp
> -f /dev/null ) && (out/host/linux-x86/bin/sepolicy-analyze
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.tmp
> permissive >
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.permissivedomains
> ) && (if [ \"userdebug\" = \"user\" -a -s
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.permissivedomains
> ]; then                 echo \"==========\" 1>&2;               echo
> \"ERROR: permissive domains not allowed in user builds\" 1>&2;
> echo \"List of invalid domains:\" 1>&2;                 cat
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.permissivedomains
> 1>&2;              exit 1;                 fi ) && (mv
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy.tmp
> out/target/product/car-x86_64/obj/ETC/sepolicy_intermediates/sepolicy )"
> > >> >>>>>> neverallow check failed at
> out/target/product/car-x86_64/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil:11513
> from system/sepolicy/private/isolated_app.te:113
> > >> >>>>>>   (neverallow isolated_app base_typeattr_290 (file (ioctl read
> write create setattr lock relabelfrom append unlink link rename open)))
> > >> >>>>>>     <root>
> > >> >>>>>>     allow at
> out/target/product/car-x86_64/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_sepolicy.cil:6402
> > >> >>>>>>       (allow domain sysfs_qemu_trace (file (ioctl read write
> getattr lock append map open)))
> > >> >>>>>>
> > >> >>>>>> Failed to generate binary
> > >> >>>>>> Failed to build policydb
> > >> >>>>>> [ 82% 60946/73832] //frameworks/compile/slang:llvm-rs-cc
> clang++ slang_rs_object_ref_count.cpp [linux_glibc]
> > >> >>>>>> ninja: build stopped: subcommand failed.
> > >> >>>>>> 19:10:30 ninja failed with: exit status 1
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>> No idea on this error , anyone met this before ?
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>>
> > >> >>>>>> --
> > >> >>>>>> --
> > >> >>>>>> You received this message because you are subscribed to the
> "Android Building" mailing list.
> > >> >>>>>> To post to this group, send email to
> [email protected]
> > >> >>>>>> To unsubscribe from this group, send email to
> > >> >>>>>> [email protected]
> > >> >>>>>> For more options, visit this group at
> > >> >>>>>> http://groups.google.com/group/android-building?hl=en
> > >> >>>>>>
> > >> >>>>>> ---
> > >> >>>>>> You received this message because you are subscribed to the
> Google Groups "Android Building" group.
> > >> >>>>>> To unsubscribe from this group and stop receiving emails from
> it, send an email to [email protected].
> > >> >>>>>> For more options, visit https://groups.google.com/d/optout.
> > >> >>>>>
> > >> >>>>>
> > >> >>>> --
> > >> >>>> --
> > >> >>>> You received this message because you are subscribed to the
> "Android Building" mailing list.
> > >> >>>> To post to this group, send email to
> [email protected]
> > >> >>>> To unsubscribe from this group, send email to
> > >> >>>> [email protected]
> > >> >>>> For more options, visit this group at
> > >> >>>> http://groups.google.com/group/android-building?hl=en
> > >> >>>>
> > >> >>>> ---
> > >> >>>> You received this message because you are subscribed to the
> Google Groups "Android Building" group.
> > >> >>>> To unsubscribe from this group and stop receiving emails from
> it, send an email to [email protected].
> > >> >>>> To view this discussion on the web visit
> https://groups.google.com/d/msgid/android-building/a513a2c9-2137-4f7e-bc7b-daad78e1529f%40googlegroups.com
> .
> > >> >>>> For more options, visit https://groups.google.com/d/optout.
> > >> >>>
> > >> >>> --
> > >> >>> --
> > >> >>> You received this message because you are subscribed to the
> "Android Building" mailing list.
> > >> >>> To post to this group, send email to
> [email protected]
> > >> >>> To unsubscribe from this group, send email to
> > >> >>> [email protected]
> > >> >>> For more options, visit this group at
> > >> >>> http://groups.google.com/group/android-building?hl=en
> > >> >>>
> > >> >>> ---
> > >> >>> You received this message because you are subscribed to the
> Google Groups "Android Building" group.
> > >> >>> To unsubscribe from this group and stop receiving emails from it,
> send an email to [email protected].
> > >> >>> To view this discussion on the web visit
> https://groups.google.com/d/msgid/android-building/CALQgHdkvBTr6eK%2Bq8hudt3DN%3DY0o4h%2BU695EUCk2Q_LFyvnhDw%40mail.gmail.com
> .
> > >> >>> For more options, visit https://groups.google.com/d/optout.
> > >>
> > >>
> > >>
> > >> --
> > >> Thanks&Regards
> > >>
> > >> Shilesh Babu
> > >> +91-9871740920
> > >> [email protected]
> >
> >
> >
> > --
> > Thanks&Regards
> >
> > Shilesh Babu
> > +91-9871740920
> > [email protected]
>
>
>
> --
> Thanks&Regards
>
> Shilesh Babu
> +91-9871740920
> [email protected]
>

-- 
-- 
You received this message because you are subscribed to the "Android Building" 
mailing list.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-building?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"Android Building" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/android-building/CABXk95Btia7d5JwpG8Af-Kvq62EG5R%3DP16mQfeD7CYidOzQqXg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to