Lines Matching refs:policy

96 // reqd_policy_mask - a policy.conf file which contains only the bare minimum
97 // policy necessary to use checkpolicy.
99 // This bare-minimum policy needs to be present in all policy.conf files, but
100 // should not necessarily be exported as part of the public policy.
103 // policy and subsequent removal of CIL policy that should not be exported.
117 // pub_policy - policy that will be exported to be a part of non-platform
118 // policy corresponding to this platform version.
120 // This is a limited subset of policy that would not compile in checkpolicy on
124 // policy, which will generate CIL policy that will then be filtered out by the
128 //   - pub_policy.cil: exported 'product', 'system_ext' and 'system' policy.
129 //   - system_ext_pub_policy.cil: exported 'system_ext' and 'system' policy.
130 //   - plat_pub_policy.cil: exported 'system' policy.
133 //   - product_mapping_file: the versioned, exported 'product' policy in product partition.
134 //   - system_ext_mapping_file: the versioned, exported 'system_ext' policy in system_ext partition.
135 //   - plat_mapping_file: the versioned, exported 'system' policy in system partition.
136 //   - plat_pub_versioned.cil: the versioned, exported 'product', 'system_ext' and 'system' policy
187 // plat_policy.conf - A combination of the private and public platform policy
286 // policy which will ship with the device. System_ext policy is not attributized
304 // product_policy.conf - A combination of the private and public product policy
305 // which will ship with the device. Product policy is not attributized
325 // policy mapping files
326 // auto-generate the mapping file for current platform policy, since it needs to
327 // track platform policy development
359 // policy files of platform (system, system_ext, product) can't be mixed with
360 // policy files of vendor (vendor, odm). If it's the case, platform policies and
363 // - Platform policy files needed to build vendor policies, such as plat_policy,
365 //   prebuilts (copy of platform policy files of version BOARD_SEPOLICY_VERS).
375 // In such scenario, we can grab platform policy files from the prebuilts/api
387 // Vendors are responsible for copying policy files from the old version of the
391 // To support both mixed build and normal build, platform policy files are
460 // plat_pub_versioned.cil - the exported platform policy associated with the version
461 // that non-platform policy targets.
471 // with the platform-provided policy.  It makes use of the reqd_policy_mask files from private
472 // policy and the platform public policy files in order to use checkpolicy.
505 // with the platform-provided policy.  It makes use of the reqd_policy_mask files from private
506 // policy and the platform public policy files in order to use checkpolicy.
788 // policy for recovery
815 // SELinux policy embedded into CTS.
816 // CTS checks neverallow rules of this policy against the policy of the device under test.
828 // Base system policy for treble sepolicy tests.