diff options
author | 2025-01-20 19:04:09 +0000 | |
---|---|---|
committer | 2025-02-03 15:26:50 +0000 | |
commit | ef64686fbe5a183a4b757a8f58a9e2c95e959d89 (patch) | |
tree | c84be5e75246790d15dad9f6d5f848dc52503f51 /android/neverallow.go | |
parent | 87943aa6821ae3c7f526295d61f122f6d243c4fc (diff) |
neverallow: add new aosp trusty genrule targets
- rename the trusty test and security vm target names
to be more explicit
- temporarily keep the old ones until the new targets are mainlined
Bug: 371777025
Test: aosp build/trusty VM test
Change-Id: Ic049c4bfed2e1c4e327e7f9df43e0d6d84dd76c0
Diffstat (limited to 'android/neverallow.go')
-rw-r--r-- | android/neverallow.go | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/android/neverallow.go b/android/neverallow.go index 7615ca805..d345ee8e4 100644 --- a/android/neverallow.go +++ b/android/neverallow.go @@ -297,19 +297,31 @@ func createLimitDirgroupRule() []Rule { WithoutMatcher("visibility", InAllowedList([]string{"//trusty/vendor/google/aosp/scripts", "//trusty/vendor/google/proprietary/scripts"})).Because(reason), NeverAllow(). ModuleType("genrule"). + // TODO: remove the 4 below targets once new targets are submitted Without("name", "trusty-arm64.lk.elf.gen"). Without("name", "trusty-arm64-virt-test-debug.lk.elf.gen"). Without("name", "trusty-x86_64.lk.elf.gen"). Without("name", "trusty-x86_64-test.lk.elf.gen"). + // trusty vm target names moving forward + Without("name", "trusty-test_vm-arm64.elf.gen"). + Without("name", "trusty-test_vm-x86.elf.gen"). + Without("name", "trusty-security_vm-arm64.elf.gen"). + Without("name", "trusty-security_vm-x86.elf.gen"). Without("name", "trusty-widevine_vm-arm64.elf.gen"). Without("name", "trusty-widevine_vm-x86.elf.gen"). WithMatcher("dir_srcs", isSetMatcherInstance).Because(reason), NeverAllow(). ModuleType("genrule"). + // TODO: remove the 4 below targets once new targets are submitted Without("name", "trusty-arm64.lk.elf.gen"). Without("name", "trusty-arm64-virt-test-debug.lk.elf.gen"). Without("name", "trusty-x86_64.lk.elf.gen"). Without("name", "trusty-x86_64-test.lk.elf.gen"). + // trusty vm target names moving forward + Without("name", "trusty-test_vm-arm64.elf.gen"). + Without("name", "trusty-test_vm-x86.elf.gen"). + Without("name", "trusty-security_vm-arm64.elf.gen"). + Without("name", "trusty-security_vm-x86.elf.gen"). Without("name", "trusty-widevine_vm-arm64.elf.gen"). Without("name", "trusty-widevine_vm-x86.elf.gen"). With("keep_gendir", "true").Because(reason), |