1# Copyright (c) 2023-2024 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14import("//build/ohos.gni") 15import("../../../code_signature.gni") 16 17config("public_code_sign_utils_configs") { 18 include_dirs = [ "include" ] 19 if (code_signature_support_binary_enable) { 20 defines = [ "SUPPORT_BINARY_ENABLE" ] 21 include_dirs += 22 [ "${code_signature_root_dir}/services/key_enable/utils/include" ] 23 } 24} 25 26ohos_shared_library("libcode_sign_utils") { 27 sanitize = { 28 cfi = true 29 cfi_cross_dso = true 30 debug = false 31 } 32 branch_protector_ret = "pac_ret" 33 sources = [ 34 "${code_signature_root_dir}/utils/src/code_sign_block.cpp", 35 "${code_signature_root_dir}/utils/src/elf_code_sign_block_v1.cpp", 36 "${code_signature_root_dir}/utils/src/data_size_report_adapter.cpp", 37 "${code_signature_root_dir}/utils/src/file_helper.cpp", 38 "src/code_sign_enable_multi_task.cpp", 39 "src/code_sign_helper.cpp", 40 "src/code_sign_utils.cpp", 41 "src/code_sign_utils_in_c.cpp", 42 "src/stat_utils.cpp", 43 ] 44 version_script = "libcode_sign_utils.versionscript" 45 cflags_cc = [ 46 "-Os", 47 "-fno-asynchronous-unwind-tables", 48 "-fno-unwind-tables", 49 ] 50 public_configs = [ 51 "${code_signature_root_dir}:common_public_config", 52 "${code_signature_root_dir}/services/key_enable:key_enable_rust_interface_config", 53 ":public_code_sign_utils_configs", 54 ] 55 configs = [ "${code_signature_root_dir}:common_utils_config" ] 56 57 deps = [ "${code_signature_root_dir}/utils:fsverity_sign_src_set" ] 58 if (host_os == "linux" && !is_asan && !ohos_indep_compiler_enable && 59 !use_clang_coverage) { 60 deps += [ "${code_signature_root_dir}/services/key_enable:key_enable_lib" ] 61 } else { 62 sources += [ "${code_signature_root_dir}/services/key_enable/src/asan/disable_rust_interface.cpp" ] 63 } 64 defines = [] 65 if (code_signature_support_oh_code_sign) { 66 defines += [ "SUPPORT_OH_CODE_SIGN" ] 67 } 68 if (build_variant == "root" || code_signature_enable_xpm_mode == 0) { 69 defines += [ "SUPPORT_PERMISSIVE_MODE" ] 70 } 71 external_deps = [ 72 "ability_base:extractortool", 73 "appverify:libhapverify", 74 "c_utils:utils", 75 "hilog:libhilog", 76 "hisysevent:libhisysevent", 77 "hitrace:hitrace_meter", 78 "openssl:libcrypto_shared", 79 ] 80 if (code_signature_support_binary_enable) { 81 sources += 82 [ "${code_signature_root_dir}/utils/src/elf_code_sign_block.cpp" ] 83 deps += [ "${code_signature_root_dir}/services/key_enable/utils:libkey_enable_utils" ] 84 defines += [ "SUPPORT_BINARY_ENABLE" ] 85 external_deps += [ "elfio:elfio" ] 86 } 87 install_enable = true 88 89 part_name = "code_signature" 90 91 subsystem_name = "security" 92 93 install_images = [ "system" ] 94} 95