sepolicy.mk

   1 #
   2 # This policy configuration will be used by samsung products
   3 #
   4
   5 BOARD_PLAT_PUBLIC_SEPOLICY_DIR += \
   6     device/samsung_slsi/sepolicy/common/public
   7
   8 BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
   9     device/samsung_slsi/sepolicy/common/private
  10
  11 BOARD_SEPOLICY_DIRS += \
  12     device/samsung_slsi/sepolicy/common/vendor
  13
  14 ifeq ($(BOARD_SEPOLICY_TEE_FLAVOR),teegris)
  15 BOARD_PLAT_PUBLIC_SEPOLICY_DIR += \
  16     device/samsung_slsi/sepolicy/tee/teegris/public
  17
  18 BOARD_SEPOLICY_DIRS += \
  19     device/samsung_slsi/sepolicy/tee/teegris/vendor
  20 else ifeq ($(BOARD_SEPOLICY_TEE_FLAVOR),mobicore)
  21 POLICY_TYPE := legacy
  22 # a device might not set the shipping api level
  23 # check if its empty to avoid erroring out in the next if
  24 ifeq ($(PRODUCT_SHIPPING_API_LEVEL),)
  25 $(warning no product shipping level defined, defaulting to legacy policy)
  26 # devices launched with oreo or later should be treble
  27 else ifneq ($(call math_gt_or_eq,$(PRODUCT_SHIPPING_API_LEVEL),26),)
  28 POLICY_TYPE := treble
  29 endif
  30
  31 BOARD_SEPOLICY_DIRS += \
  32     device/samsung_slsi/sepolicy/tee/mobicore/$(POLICY_TYPE)
  33
  34 BOARD_SEPOLICY_DIRS += \
  35     device/samsung_slsi/sepolicy/tee/mobicore/common
  36 endif