Create acl for linking against a shared resource apk
PiperOrigin-RevId: 527101321
Change-Id: I124c53ce98f2e75fdbbb0f9b9eff08282571395e
diff --git a/rules/acls.bzl b/rules/acls.bzl
index 4e06643..86563cd 100644
--- a/rules/acls.bzl
+++ b/rules/acls.bzl
@@ -77,6 +77,7 @@
load("//rules/acls:enforce_min_sdk_floor_rollout.bzl", "ENFORCE_MIN_SDK_FLOOR_FALLBACK", "ENFORCE_MIN_SDK_FLOOR_ROLLOUT")
load("//rules/acls:android_apk_to_bundle_features_lockdown.bzl", "ANDROID_APK_TO_BUNDLE_FEATURES")
load("//rules/acls:android_local_test_jdk_sts_rollout.bzl", "ANDROID_LOCAL_TEST_JDK_STS_FALLBACK", "ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT")
+load("//rules/acls:shared_library_resource_linking.bzl", "SHARED_LIBRARY_RESOURCE_LINKING_ALLOWLIST")
def _in_aar_import_deps_checker(fqn):
return not matches(fqn, AAR_IMPORT_DEPS_CHECKER_FALLBACK_DICT) and matches(fqn, AAR_IMPORT_DEPS_CHECKER_ROLLOUT_DICT)
@@ -221,6 +222,9 @@
def _in_android_local_test_jdk_sts_rollout(fqn):
return not matches(fqn, ANDROID_LOCAL_TEST_JDK_STS_FALLBACK_DICT) and matches(fqn, ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT_DICT)
+def _in_shared_library_resource_linking_allowlist(fqn):
+ return matches(fqn, SHARED_LIBRARY_RESOURCE_LINKING_DICT)
+
def make_dict(lst):
"""Do not use this method outside of acls directory."""
return {t: True for t in lst}
@@ -300,6 +304,7 @@
ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT_DICT = make_dict(ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT)
DATABINDING_ALLOWED_DICT = make_dict(DATABINDING_ALLOWED)
DATABINDING_DISALLOWED_DICT = make_dict(DATABINDING_DISALLOWED)
+SHARED_LIBRARY_RESOURCE_LINKING_DICT = make_dict(SHARED_LIBRARY_RESOURCE_LINKING_ALLOWLIST)
def matches(fqn, dct):
# Labels with workspace names ("@workspace//pkg:target") are not supported.
@@ -387,6 +392,7 @@
in_enforce_min_sdk_floor_rollout = _in_enforce_min_sdk_floor_rollout,
in_android_apk_to_bundle_features = _in_android_apk_to_bundle_features,
in_android_local_test_jdk_sts_rollout = _in_android_local_test_jdk_sts_rollout,
+ in_shared_library_resource_linking_allowlist = _in_shared_library_resource_linking_allowlist,
)
# Visible for testing
diff --git a/rules/acls/shared_library_resource_linking.bzl b/rules/acls/shared_library_resource_linking.bzl
new file mode 100644
index 0000000..01c7a4d
--- /dev/null
+++ b/rules/acls/shared_library_resource_linking.bzl
@@ -0,0 +1,19 @@
+# Copyright 2023 The Bazel Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Allowlist for directly or transitively linking against shared resource apks."""
+
+SHARED_LIBRARY_RESOURCE_LINKING_ALLOWLIST = [
+ "//:__subpackages__",
+]
