sepolicy.mk

#
# This policy configuration will be used by samsung products
#

SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/common/public

SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/common/private

BOARD_VENDOR_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/common/vendor

ifeq ($(BOARD_SEPOLICY_TEE_FLAVOR),teegris)
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/tee/teegris/public

BOARD_VENDOR_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/tee/teegris/vendor
else ifeq ($(BOARD_SEPOLICY_TEE_FLAVOR),mobicore)
POLICY_TYPE := legacy
# a device might not set the shipping api level
# check if its empty to avoid erroring out in the next if
ifeq ($(PRODUCT_SHIPPING_API_LEVEL),)
$(warning no product shipping level defined, defaulting to legacy policy)
# devices launched with oreo or later should be treble
else ifneq ($(call math_gt_or_eq,$(PRODUCT_SHIPPING_API_LEVEL),26),)
POLICY_TYPE := treble
endif

BOARD_VENDOR_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/tee/mobicore/$(POLICY_TYPE)

BOARD_VENDOR_SEPOLICY_DIRS += \
    device/samsung_slsi/sepolicy/tee/mobicore/common
endif