cil_write_ast: support typepermissive
Platform policy was lacking the support for typepermissive, which is
useful when the device is in enforcing mode and one is bringing up a
new service.
The error is:
Symbol not inside parenthesis at line 1239 of out/target/product/hikey/obj/ETC/nonplat_sepolicy.cil_intermediates/nonplat_policy_nvr.cil
Test: After applying this change, one can successfully set device specific
policy to have permissive domains. In the test case, we set hci_attach to
permissive and built for hikey. The result should be a valid build, with
a policy that has hci_attach as permissive. Also ensure hikey device
boots and runs as expected and no policydb corruption occurred.
$ sepolicy-analyze $OUT/root/sepolicy permissive
crash_dump
su
hci_attach
Change-Id: Icd55b32d9131b7c1f58334249521b53706d9eb42
Signed-off-by: William Roberts <william.c.roberts@intel.com>
1 file changed