p96705831
/
platform_build
forked from openkylin/platform_build
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
platform_build/core/app_certificate_validate.mk

11 lines
479 B
Makefile
Raw Normal View History

Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb
2018-12-17 13:45:15 +08:00
Define non-system module as variable Define non_system_module in base_rules.mk when the module is product, vendor, product_services or proprietary module. Bug: 74699609 Test: m -j Change-Id: Iebdd3ec8c643be3d9877b7a96cbdd83465fa3878
2019-01-18 14:09:09 +08:00
ifeq (true,$(non_system_module))
Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb
2018-12-17 13:45:15 +08:00
ifneq (,$(filter $(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))%,$(LOCAL_CERTIFICATE)))
CERTIFICATE_VIOLATION_MODULES += $(LOCAL_MODULE)
Access PRODUCT_ variables directly This CL simplifies the PRODUCTS.$(INTERNAL_PRODUCT).X accesses of product variables, and removes unnecessary stripping of them. Replace: '\$\(PRODUCTS\.\$\(INTERNAL_PRODUCT\)\.([^\)]*)\)' with '$(\1)' Replace: '\$\(strip\s*\$\(PRODUCT_([^\)]*)\)\)' with '$(PRODUCT_\1)' A few minor manual tweaks. Bug: 116769560 Test: presubmit Change-Id: I70c54f1582e3cc780028535960147d99ebc2e0e1
2019-03-28 23:45:40 +08:00
ifeq (true,$(PRODUCT_ENFORCE_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT))
Use inclusive language in build/make Test: m checkbuild Change-Id: I54a7e55d3fdd5571ef1ae33ebe443c10d138fd28
2020-06-12 02:25:05 +08:00
$(if $(filter $(LOCAL_MODULE),$(PRODUCT_ARTIFACT_SYSTEM_CERTIFICATE_REQUIREMENT_ALLOW_LIST)),,\
Dump and enforce certificate for apks Dump the list of APKs that aren't located at system partition and signed with system certificate. And when enforcement option is enabled, it makes build error if there is the apk that satisfies the condition above. Bug: 74699609 Test: m -j Test: m out/target/product/$(get_build_var TARGET_DEVICE)/certificate_violation_modules.txt Change-Id: I23c41f2665dd97abac3e77d1c82d81ff91b894eb
2018-12-17 13:45:15 +08:00
$(call pretty-error,The module in product partition cannot be signed with certificate in system.))
endif
endif
Access PRODUCT_ variables directly This CL simplifies the PRODUCTS.$(INTERNAL_PRODUCT).X accesses of product variables, and removes unnecessary stripping of them. Replace: '\$\(PRODUCTS\.\$\(INTERNAL_PRODUCT\)\.([^\)]*)\)' with '$(\1)' Replace: '\$\(strip\s*\$\(PRODUCT_([^\)]*)\)\)' with '$(PRODUCT_\1)' A few minor manual tweaks. Bug: 116769560 Test: presubmit Change-Id: I70c54f1582e3cc780028535960147d99ebc2e0e1
2019-03-28 23:45:40 +08:00
endif