PawletOS/android_vendor_pawlet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add bg-upd sepolicy dir and a security patch date variable

Browse Source 
bg-upd's own sepolicy domain (packages/apps/BgUpd/sepolicy, in its own repo)
now gets pulled into BOARD_SEPOLICY_DIRS unconditionally alongside its
PRODUCT_PACKAGES entry, since it's a core PawletOS system app.

PAWLET_SECURITY_PATCH/PLATFORM_SECURITY_PATCH didn't exist anywhere before —
device previously just inherited whatever default date came from upstream.
Paired with PawletOS-Build/docs/security-patch-process.md and
scripts/check_security_patch.py.
This commit is contained in:
oxmc7769
2026-07-11 16:33:48 -07:00
parent 5480a452f1
commit f903842054
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/common.mk
+4
View File
@@ -94,6 +94,10 @@ PRODUCT_PACKAGES += \
PawletSetupWizard \
BgUpd
# bg-upd's own sepolicy domain — lives in its own repo (packages/apps/BgUpd/sepolicy),
# included unconditionally since it's a core PawletOS system app, not an optional one.
BOARD_SEPOLICY_DIRS += packages/apps/BgUpd/sepolicy
# ---------------------------------------------------------------------------
# Day-one default WebView provider (com.android.webview / "chromium"), so the
# device boots with a working WebView before bg-upd's first check ever runs.
config/version.mk
+11
View File
@@ -42,6 +42,17 @@ PAWLET_VERSION := $(PAWLET_MAJOR_VERSION).$(PAWLET_MINOR_VERSION)-$(PAWLET_VERSI
# Short display version (major-suffix, like LineageOS 23-<suffix>)
PAWLET_DISPLAY_VERSION := $(PAWLET_MAJOR_VERSION)-$(PAWLET_VERSION_SUFFIX)
# ---------------------------------------------------------------------------
# Security patch level
# ---------------------------------------------------------------------------
# Bumped manually whenever a monthly AOSP security bulletin's patches are
# actually backported into the tree — this is a record of work done, not
# something CI infers automatically. See PawletOS-Build/docs/security-patch-process.md
# and PawletOS-Build/scripts/check_security_patch.py (run the latter to see
# how far behind this date is against the latest published AOSP bulletin).
PAWLET_SECURITY_PATCH := 2026-07-05
PLATFORM_SECURITY_PATCH := $(PAWLET_SECURITY_PATCH)
# ---------------------------------------------------------------------------
# System properties written into /product/build.prop
# ---------------------------------------------------------------------------