android_device_lenovo_msm89.../board/sepolicy.mk

include device/qcom/sepolicy/sepolicy.mk

# SELinux
BOARD_SEPOLICY_DIRS += \
    $(VENDOR_PATH)/sepolicy/vendor

BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
    $(VENDOR_PATH)/sepolicy/private
msm8937-common: sepolicy: Address camera daemon denial Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn> 2018-06-05 05:30:41 +02:00			`include device/qcom/sepolicy/sepolicy.mk`

land: Remove CM_PATH and add necessary config/product Signed-off-by: karthick111 <karthickrko61@gmail.com> 2017-01-18 22:57:49 -06:00			`# SELinux`
			`BOARD_SEPOLICY_DIRS += \`
msm8937-common: Add selinux/private/service_contexts. This makes sure that the remaining binder services for radio end up in plat_service_contexts. That in turn allows us to enforce that servicemanager will only serve services from plat_service_contexts on FULL_TREBLE devices. Bug: 36866029 Test: boot, verify radio services still work Change-Id: Ib67b3a03e5599484c5c4fb27a0f323a37dd51636 Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn> 2017-08-10 17:15:00 +02:00			`$(VENDOR_PATH)/sepolicy/vendor`

			`BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \`
			`$(VENDOR_PATH)/sepolicy/private`