summaryrefslogtreecommitdiff
path: root/android/neverallow.go
diff options
context:
space:
mode:
author Armelle Laine <armellel@google.com> 2025-01-20 19:04:09 +0000
committer Armelle Laine <armellel@google.com> 2025-02-03 15:26:50 +0000
commitef64686fbe5a183a4b757a8f58a9e2c95e959d89 (patch)
treec84be5e75246790d15dad9f6d5f848dc52503f51 /android/neverallow.go
parent87943aa6821ae3c7f526295d61f122f6d243c4fc (diff)
neverallow: add new aosp trusty genrule targets
- rename the trusty test and security vm target names to be more explicit - temporarily keep the old ones until the new targets are mainlined Bug: 371777025 Test: aosp build/trusty VM test Change-Id: Ic049c4bfed2e1c4e327e7f9df43e0d6d84dd76c0
Diffstat (limited to 'android/neverallow.go')
-rw-r--r--android/neverallow.go12
1 files changed, 12 insertions, 0 deletions
diff --git a/android/neverallow.go b/android/neverallow.go
index 7615ca805..d345ee8e4 100644
--- a/android/neverallow.go
+++ b/android/neverallow.go
@@ -297,19 +297,31 @@ func createLimitDirgroupRule() []Rule {
WithoutMatcher("visibility", InAllowedList([]string{"//trusty/vendor/google/aosp/scripts", "//trusty/vendor/google/proprietary/scripts"})).Because(reason),
NeverAllow().
ModuleType("genrule").
+ // TODO: remove the 4 below targets once new targets are submitted
Without("name", "trusty-arm64.lk.elf.gen").
Without("name", "trusty-arm64-virt-test-debug.lk.elf.gen").
Without("name", "trusty-x86_64.lk.elf.gen").
Without("name", "trusty-x86_64-test.lk.elf.gen").
+ // trusty vm target names moving forward
+ Without("name", "trusty-test_vm-arm64.elf.gen").
+ Without("name", "trusty-test_vm-x86.elf.gen").
+ Without("name", "trusty-security_vm-arm64.elf.gen").
+ Without("name", "trusty-security_vm-x86.elf.gen").
Without("name", "trusty-widevine_vm-arm64.elf.gen").
Without("name", "trusty-widevine_vm-x86.elf.gen").
WithMatcher("dir_srcs", isSetMatcherInstance).Because(reason),
NeverAllow().
ModuleType("genrule").
+ // TODO: remove the 4 below targets once new targets are submitted
Without("name", "trusty-arm64.lk.elf.gen").
Without("name", "trusty-arm64-virt-test-debug.lk.elf.gen").
Without("name", "trusty-x86_64.lk.elf.gen").
Without("name", "trusty-x86_64-test.lk.elf.gen").
+ // trusty vm target names moving forward
+ Without("name", "trusty-test_vm-arm64.elf.gen").
+ Without("name", "trusty-test_vm-x86.elf.gen").
+ Without("name", "trusty-security_vm-arm64.elf.gen").
+ Without("name", "trusty-security_vm-x86.elf.gen").
Without("name", "trusty-widevine_vm-arm64.elf.gen").
Without("name", "trusty-widevine_vm-x86.elf.gen").
With("keep_gendir", "true").Because(reason),