diff options
Diffstat (limited to 'android/neverallow.go')
| -rw-r--r-- | android/neverallow.go | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/android/neverallow.go b/android/neverallow.go index d590d8ec9..e0af98149 100644 --- a/android/neverallow.go +++ b/android/neverallow.go @@ -282,7 +282,7 @@ func createLimitNdkExportRule() []Rule { } func createLimitDirgroupRule() []Rule { - reason := "dirgroup module and dir_srcs property of genrule is allowed only to Trusty build rule." + reason := "dirgroup module and dir_srcs / keep_gendir property of genrule is allowed only to Trusty build rule." return []Rule{ NeverAllow(). ModuleType("dirgroup"). @@ -297,6 +297,13 @@ func createLimitDirgroupRule() []Rule { Without("name", "trusty-x86_64.lk.elf.gen"). Without("name", "trusty-x86_64-test.lk.elf.gen"). WithMatcher("dir_srcs", isSetMatcherInstance).Because(reason), + NeverAllow(). + ModuleType("genrule"). + Without("name", "trusty-arm64.lk.elf.gen"). + Without("name", "trusty-arm64-virt-test-debug.lk.elf.gen"). + Without("name", "trusty-x86_64.lk.elf.gen"). + Without("name", "trusty-x86_64-test.lk.elf.gen"). + With("keep_gendir", "true").Because(reason), } } |