1# Copyright 2020 The Bazel Authors. All rights reserved. 2# 3# Licensed under the Apache License, Version 2.0 (the "License"); 4# you may not use this file except in compliance with the License. 5# You may obtain a copy of the License at 6# 7# http://www.apache.org/licenses/LICENSE-2.0 8# 9# Unless required by applicable law or agreed to in writing, software 10# distributed under the License is distributed on an "AS IS" BASIS, 11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12# See the License for the specific language governing permissions and 13# limitations under the License. 14 15"""Access Control Lists. 16 17To create a new list: 18 1. Create new .bzl file in the acls directory with a list of targets. 19 2. Create matching method in this file. 20 3. Add matching method to struct. 21 22To check an ACL: 23 1. Import the `acls` struct. 24 2. Check `acls.list_name(fqn)` using the //fully/qualified:target 25 26To update a list: 27 1. Directly add/remove/edit targets in the appropriate .bzl file 28""" 29 30load("//rules/acls:aar_import_deps_checker.bzl", "AAR_IMPORT_DEPS_CHECKER_FALLBACK", "AAR_IMPORT_DEPS_CHECKER_ROLLOUT") 31load("//rules/acls:aar_import_explicit_exports_manifest.bzl", "AAR_IMPORT_EXPLICIT_EXPORTS_MANIFEST") 32load("//rules/acls:aar_import_exports_r_java.bzl", "AAR_IMPORT_EXPORTS_R_JAVA") 33load("//rules/acls:aar_propagate_resources.bzl", "AAR_PROPAGATE_RESOURCES_FALLBACK", "AAR_PROPAGATE_RESOURCES_ROLLOUT") 34load("//rules/acls:ait_install_snapshots.bzl", "APP_INSTALLATION_SNAPSHOT", "APP_INSTALLATION_SNAPSHOT_FALLBACK") 35load("//rules/acls:allow_resource_conflicts.bzl", "ALLOW_RESOURCE_CONFLICTS") 36load("//rules/acls:android_apk_to_bundle_features_lockdown.bzl", "ANDROID_APK_TO_BUNDLE_FEATURES") 37load("//rules/acls:android_archive_dogfood.bzl", "ANDROID_ARCHIVE_DOGFOOD") 38load("//rules/acls:android_archive_duplicate_class_allowlist.bzl", "ANDROID_ARCHIVE_DUPLICATE_CLASS_ALLOWLIST") 39load("//rules/acls:android_archive_excluded_deps_denylist.bzl", "ANDROID_ARCHIVE_EXCLUDED_DEPS_DENYLIST") 40load("//rules/acls:android_archive_exposed_package_allowlist.bzl", "ANDROID_ARCHIVE_EXPOSED_PACKAGE_ALLOWLIST") 41load("//rules/acls:android_binary_min_sdk_version_attribute.bzl", "ANDROID_BINARY_MIN_SDK_VERSION_ATTRIBUTE_ALLOWLIST") 42load("//rules/acls:android_binary_raw_access_to_resource_paths_allowlist.bzl", "ANDROID_BINARY_RAW_ACCESS_TO_RESOURCE_PATHS_ALLOWLIST") 43load("//rules/acls:android_binary_resource_name_obfuscation_opt_out_allowlist.bzl", "ANDROID_BINARY_RESOURCE_NAME_OBFUSCATION_OPT_OUT_ALLOWLIST") 44load("//rules/acls:android_binary_starlark_dex_desugar_proguard.bzl", "ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_FALLBACK", "ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_ROLLOUT") 45load("//rules/acls:android_binary_starlark_javac.bzl", "ANDROID_BINARY_STARLARK_JAVAC_FALLBACK", "ANDROID_BINARY_STARLARK_JAVAC_ROLLOUT") 46load("//rules/acls:android_binary_starlark_split_transition.bzl", "ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_FALLBACK", "ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_ROLLOUT") 47load("//rules/acls:android_binary_with_sandboxed_sdks_allowlist.bzl", "ANDROID_BINARY_WITH_SANDBOXED_SDKS_ALLOWLIST") 48load("//rules/acls:android_build_stamping_rollout.bzl", "ANDROID_BUILD_STAMPING_FALLBACK", "ANDROID_BUILD_STAMPING_ROLLOUT") 49load("//rules/acls:android_device_plugin_rollout.bzl", "ANDROID_DEVICE_PLUGIN_FALLBACK", "ANDROID_DEVICE_PLUGIN_ROLLOUT") 50load("//rules/acls:android_feature_splits_dogfood.bzl", "ANDROID_FEATURE_SPLITS_DOGFOOD") 51load("//rules/acls:android_instrumentation_binary_starlark_resources.bzl", "ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_FALLBACK", "ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_ROLLOUT") 52load("//rules/acls:android_instrumentation_test_manifest_check_rollout.bzl", "ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_FALLBACK", "ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_ROLLOUT") 53load("//rules/acls:android_instrumentation_test_prebuilt_test_apk.bzl", "ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_FALLBACK", "ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_ROLLOUT") 54load("//rules/acls:android_library_resources_without_srcs.bzl", "ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS", "ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_GENERATOR_FUNCTIONS") 55load("//rules/acls:android_library_starlark_resource_outputs.bzl", "ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_FALLBACK", "ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_ROLLOUT") 56load("//rules/acls:android_library_use_aosp_aidl_compiler.bzl", "ANDROID_LIBRARY_USE_AOSP_AIDL_COMPILER_ALLOWLIST") 57load("//rules/acls:android_lint_checks_rollout.bzl", "ANDROID_LINT_CHECKS_FALLBACK", "ANDROID_LINT_CHECKS_ROLLOUT") 58load("//rules/acls:android_lint_rollout.bzl", "ANDROID_LINT_FALLBACK", "ANDROID_LINT_ROLLOUT") 59load("//rules/acls:android_local_test_jdk_sts_rollout.bzl", "ANDROID_LOCAL_TEST_JDK_STS_FALLBACK", "ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT") 60load("//rules/acls:android_test_lockdown.bzl", "ANDROID_TEST_LOCKDOWN_GENERATOR_FUNCTIONS", "ANDROID_TEST_LOCKDOWN_TARGETS") 61load("//rules/acls:android_test_platform_rollout.bzl", "ANDROID_TEST_PLATFORM_FALLBACK", "ANDROID_TEST_PLATFORM_ROLLOUT") 62load("//rules/acls:b122039567.bzl", "B122039567") 63load("//rules/acls:b123854163.bzl", "B123854163") 64load("//rules/acls:baseline_profiles_optimizer_integration.bzl", "BASELINE_PROFILES_OPTIMIZER_INTEGRATION") 65load("//rules/acls:baseline_profiles_rollout.bzl", "BASELINE_PROFILES_ROLLOUT") 66load("//rules/acls:databinding.bzl", "DATABINDING_ALLOWED", "DATABINDING_DISALLOWED") 67load("//rules/acls:dex2oat_opts.bzl", "CAN_USE_DEX2OAT_OPTIONS") 68load("//rules/acls:fix_export_exporting_rollout.bzl", "FIX_EXPORT_EXPORTING_FALLBACK", "FIX_EXPORT_EXPORTING_ROLLOUT") 69load("//rules/acls:fix_resource_transitivity_rollout.bzl", "FIX_RESOURCE_TRANSITIVITY_FALLBACK", "FIX_RESOURCE_TRANSITIVITY_ROLLOUT") 70load("//rules/acls:host_dex2oat_rollout.bzl", "AIT_USE_HOST_DEX2OAT_ROLLOUT", "AIT_USE_HOST_DEX2OAT_ROLLOUT_FALLBACK") 71load("//rules/acls:install_apps_in_data.bzl", "INSTALL_APPS_IN_DATA") 72load("//rules/acls:lint_registry_rollout.bzl", "LINT_REGISTRY_FALLBACK", "LINT_REGISTRY_ROLLOUT") 73load("//rules/acls:local_test_multi_proto.bzl", "LOCAL_TEST_MULTI_PROTO_PKG") 74load("//rules/acls:local_test_rollout.bzl", "LOCAL_TEST_FALLBACK", "LOCAL_TEST_ROLLOUT") 75load("//rules/acls:local_test_starlark_resources.bzl", "LOCAL_TEST_STARLARK_RESOURCES_FALLBACK", "LOCAL_TEST_STARLARK_RESOURCES_ROLLOUT") 76load("//rules/acls:min_sdk_floors.bzl", "MIN_SDK_FLOORS") 77load( 78 "//rules/acls:partial_jetification_targets.bzl", 79 "PARTIAL_JETIFICATION_TARGETS_FALLBACK", 80 "PARTIAL_JETIFICATION_TARGETS_ROLLOUT", 81) 82load("//rules/acls:proguard_apply_mapping.bzl", "ALLOW_PROGUARD_APPLY_MAPPING") 83load("//rules/acls:r8.bzl", "USE_R8") 84load("//rules/acls:shared_library_resource_linking.bzl", "SHARED_LIBRARY_RESOURCE_LINKING_ALLOWLIST") 85load("//rules/acls:test_to_instrument_test_rollout.bzl", "TEST_TO_INSTRUMENT_TEST_FALLBACK", "TEST_TO_INSTRUMENT_TEST_ROLLOUT") 86 87def _get_min_sdk_floor(fqn): 88 for minsdk, package_dict in MIN_SDK_FLOORS_DICT.items(): 89 if matches(fqn, package_dict): 90 return minsdk 91 fail("No matching min_sdk_floor for %s" % fqn) 92 93def _in_aar_import_deps_checker(fqn): 94 return not matches(fqn, AAR_IMPORT_DEPS_CHECKER_FALLBACK_DICT) and matches(fqn, AAR_IMPORT_DEPS_CHECKER_ROLLOUT_DICT) 95 96def _in_aar_import_explicit_exports_manifest(fqn): 97 return matches(fqn, AAR_IMPORT_EXPLICIT_EXPORTS_MANIFEST_DICT) 98 99def _in_aar_import_exports_r_java(fqn): 100 return matches(fqn, AAR_IMPORT_EXPORTS_R_JAVA_DICT) 101 102def _in_aar_propagate_resources(fqn): 103 # AOSP-only change. 104 return True 105 106def _in_android_archive_dogfood(fqn): 107 return matches(fqn, ANDROID_ARCHIVE_DOGFOOD_DICT) 108 109def _in_android_archive_excluded_deps_denylist(fqn): 110 return matches(fqn, ANDROID_ARCHIVE_EXCLUDED_DEPS_DENYLIST_DICT) 111 112def _in_android_device_plugin_rollout(fqn): 113 return not matches(fqn, ANDROID_DEVICE_PLUGIN_FALLBACK_DICT) and matches(fqn, ANDROID_DEVICE_PLUGIN_ROLLOUT_DICT) 114 115def _in_android_instrumentation_binary_starlark_resources(fqn): 116 return not matches(fqn, ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_FALLBACK_DICT) and matches(fqn, ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_ROLLOUT_DICT) 117 118def _in_android_binary_starlark_javac(fqn): 119 return not matches(fqn, ANDROID_BINARY_STARLARK_JAVAC_FALLBACK_DICT) and matches(fqn, ANDROID_BINARY_STARLARK_JAVAC_ROLLOUT_DICT) 120 121def _in_android_binary_starlark_split_transition(fqn): 122 return not matches(fqn, ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_FALLBACK_DICT) and matches(fqn, ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_ROLLOUT_DICT) 123 124def _in_android_binary_with_sandboxed_sdks_allowlist(fqn): 125 return matches(fqn, ANDROID_BINARY_WITH_SANDBOXED_SDKS_ALLOWLIST_DICT) 126 127def _in_android_feature_splits_dogfood(fqn): 128 return matches(fqn, ANDROID_FEATURE_SPLITS_DOGFOOD_DICT) 129 130def _in_android_lint_checks_rollout(fqn): 131 return not matches(fqn, ANDROID_LINT_CHECKS_FALLBACK_DICT) and matches(fqn, ANDROID_LINT_CHECKS_ROLLOUT_DICT) 132 133def _in_android_lint_rollout(fqn): 134 return not matches(fqn, ANDROID_LINT_FALLBACK_DICT) and matches(fqn, ANDROID_LINT_ROLLOUT_DICT) 135 136def _in_lint_registry_rollout(fqn): 137 return not matches(fqn, LINT_REGISTRY_FALLBACK_DICT) and matches(fqn, LINT_REGISTRY_ROLLOUT_DICT) 138 139def _in_android_build_stamping_rollout(fqn): 140 return not matches(fqn, ANDROID_BUILD_STAMPING_FALLBACK_DICT) and matches(fqn, ANDROID_BUILD_STAMPING_ROLLOUT_DICT) 141 142def _in_android_test_lockdown_allowlist(fqn, generator): 143 if generator == "android_test": 144 return matches(fqn, ANDROID_TEST_LOCKDOWN_TARGETS) 145 return generator in ANDROID_TEST_LOCKDOWN_GENERATOR_FUNCTIONS_DICT 146 147def _in_b122039567(fqn): 148 return matches(fqn, B122039567_DICT) 149 150def _in_b123854163(fqn): 151 return matches(fqn, B123854163_DICT) 152 153def _in_android_library_resources_without_srcs(fqn): 154 return matches(fqn, ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_DICT) 155 156def _in_android_library_resources_without_srcs_generator_functions(gfn): 157 return gfn in ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_GENERATOR_FUNCTIONS_DICT 158 159def _in_android_library_starlark_resource_outputs_rollout(fqn): 160 return not matches(fqn, ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_FALLBACK_DICT) and matches(fqn, ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_ROLLOUT_DICT) 161 162def _in_android_library_use_aosp_aidl_compiler_allowlist(fqn): 163 return matches(fqn, ANDROID_LIBRARY_USE_AOSP_AIDL_COMPILER_ALLOWLIST_DICT) 164 165def _in_app_installation_snapshot(fqn): 166 return not matches(fqn, APP_INSTALLATION_SNAPSHOT_FALLBACK_DICT) and matches(fqn, APP_INSTALLATION_SNAPSHOT_DICT) 167 168def _in_databinding_allowed(fqn): 169 return not matches(fqn, DATABINDING_DISALLOWED_DICT) and matches(fqn, DATABINDING_ALLOWED_DICT) 170 171def _in_dex2oat_opts(fqn): 172 return matches(fqn, CAN_USE_DEX2OAT_OPTIONS_DICT) 173 174def _in_fix_export_exporting_rollout(fqn): 175 return not matches(fqn, FIX_EXPORT_EXPORTING_FALLBACK_DICT) and matches(fqn, FIX_EXPORT_EXPORTING_ROLLOUT_DICT) 176 177def _in_fix_resource_transivity_rollout(fqn): 178 return not matches(fqn, FIX_RESOURCE_TRANSIVITY_FALLBACK_DICT) and matches(fqn, FIX_RESOURCE_TRANSIVITY_ROLLOUT_DICT) 179 180def _in_host_dex2oat_rollout(fqn): 181 return not matches(fqn, AIT_USE_HOST_DEX2OAT_ROLLOUT_FALLBACK_DICT) and matches(fqn, AIT_USE_HOST_DEX2OAT_ROLLOUT_DICT) 182 183def _in_install_apps_in_data(fqn): 184 return matches(fqn, AIT_INSTALL_APPS_IN_DATA_DICT) 185 186def _in_local_test_multi_proto(fqn): 187 return matches(fqn, LOCAL_TEST_MULTI_PROTO_PKG_DICT) 188 189def _in_local_test_rollout(fqn): 190 return not matches(fqn, LOCAL_TEST_FALLBACK_DICT) and matches(fqn, LOCAL_TEST_ROLLOUT_DICT) 191 192def _in_local_test_starlark_resources(fqn): 193 return not matches(fqn, LOCAL_TEST_STARLARK_RESOURCES_FALLBACK_DICT) and matches(fqn, LOCAL_TEST_STARLARK_RESOURCES_ROLLOUT_DICT) 194 195def _in_android_test_platform_rollout(fqn): 196 return not matches(fqn, ANDROID_TEST_PLATFORM_FALLBACK_DICT) and matches(fqn, ANDROID_TEST_PLATFORM_ROLLOUT_DICT) 197 198def _in_test_to_instrument_test_rollout(fqn): 199 return not matches(fqn, TEST_TO_INSTRUMENT_TEST_FALLBACK_DICT) and matches(fqn, TEST_TO_INSTRUMENT_TEST_ROLLOUT_DICT) 200 201def _in_allow_resource_conflicts(fqn): 202 return matches(fqn, ALLOW_RESOURCE_CONFLICTS_DICT) 203 204def _in_partial_jetification_targets(fqn): 205 return not matches(fqn, PARTIAL_JETIFICATION_TARGETS_FALLBACK_DICT) and matches(fqn, PARTIAL_JETIFICATION_TARGETS_ROLLOUT_DICT) 206 207def _in_android_instrumentation_test_manifest_check_rollout(fqn): 208 return not matches(fqn, ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_FALLBACK_DICT) and matches(fqn, ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_ROLLOUT_DICT) 209 210def _in_android_instrumentation_test_prebuilt_test_apk(fqn): 211 return matches(fqn, ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_ROLLOUT_DICT) and not matches(fqn, ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_FALLBACK_DICT) 212 213def _get_android_archive_exposed_package_allowlist(fqn): 214 return ANDROID_ARCHIVE_EXPOSED_PACKAGE_ALLOWLIST.get(fqn, []) 215 216def _in_baseline_profiles_rollout(fqn): 217 return matches(fqn, BASELINE_PROFILES_ROLLOUT) 218 219def _in_baseline_profiles_optimizer_integration(fqn): 220 return matches(fqn, BASELINE_PROFILES_OPTIMIZER_INTEGRATION) 221 222def _in_android_apk_to_bundle_features(fqn): 223 return matches(fqn, ANDROID_APK_TO_BUNDLE_FEATURES_DICT) 224 225def _get_android_archive_duplicate_class_allowlist(fqn): 226 return ANDROID_ARCHIVE_DUPLICATE_CLASS_ALLOWLIST.get(fqn, []) 227 228def _in_android_local_test_jdk_sts_rollout(fqn): 229 return not matches(fqn, ANDROID_LOCAL_TEST_JDK_STS_FALLBACK_DICT) and matches(fqn, ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT_DICT) 230 231def _in_shared_library_resource_linking_allowlist(fqn): 232 return matches(fqn, SHARED_LIBRARY_RESOURCE_LINKING_DICT) 233 234def _in_android_binary_starlark_dex_desugar_proguard(fqn): 235 return not matches(fqn, ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_FALLBACK_DICT) and matches(fqn, ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_ROLLOUT_DICT) 236 237def _in_android_binary_min_sdk_version_attribute_allowlist(fqn): 238 return matches(fqn, ANDROID_BINARY_MIN_SDK_VERSION_ATTRIBUTE_DICT) 239 240def _in_android_binary_raw_access_to_resource_paths_allowlist(fqn): 241 return matches(fqn, ANDROID_BINARY_RAW_ACCESS_TO_RESOURCE_PATHS_ALLOWLIST_DICT) 242 243def _in_android_binary_resource_name_obfuscation_opt_out_allowlist(fqn): 244 return matches(fqn, ANDROID_BINARY_RESOURCE_NAME_OBFUSCATION_OPT_OUT_ALLOWLIST_DICT) 245 246def _in_allow_proguard_apply_mapping(fqn): 247 return matches(fqn, ALLOW_PROGUARD_APPLY_MAPPING_DICT) 248 249def _use_r8(fqn): 250 return matches(fqn, USE_R8_DICT) 251 252def make_dict(lst): 253 """Do not use this method outside of acls directory.""" 254 return {t: True for t in lst} 255 256def make_min_sdk_dict(dict_of_lists): 257 res = {} 258 for k in dict_of_lists.keys(): 259 res[k] = make_dict(dict_of_lists[k]) 260 return res 261 262AAR_IMPORT_DEPS_CHECKER_FALLBACK_DICT = make_dict(AAR_IMPORT_DEPS_CHECKER_FALLBACK) 263AAR_IMPORT_DEPS_CHECKER_ROLLOUT_DICT = make_dict(AAR_IMPORT_DEPS_CHECKER_ROLLOUT) 264AAR_IMPORT_EXPLICIT_EXPORTS_MANIFEST_DICT = make_dict(AAR_IMPORT_EXPLICIT_EXPORTS_MANIFEST) 265AAR_IMPORT_EXPORTS_R_JAVA_DICT = make_dict(AAR_IMPORT_EXPORTS_R_JAVA) 266AAR_PROPAGATE_RESOURCES_FALLBACK_DICT = make_dict(AAR_PROPAGATE_RESOURCES_FALLBACK) 267AAR_PROPAGATE_RESOURCES_ROLLOUT_DICT = make_dict(AAR_PROPAGATE_RESOURCES_ROLLOUT) 268ANDROID_ARCHIVE_DOGFOOD_DICT = make_dict(ANDROID_ARCHIVE_DOGFOOD) 269ANDROID_ARCHIVE_EXCLUDED_DEPS_DENYLIST_DICT = make_dict(ANDROID_ARCHIVE_EXCLUDED_DEPS_DENYLIST) 270ANDROID_DEVICE_PLUGIN_ROLLOUT_DICT = make_dict(ANDROID_DEVICE_PLUGIN_ROLLOUT) 271ANDROID_DEVICE_PLUGIN_FALLBACK_DICT = make_dict(ANDROID_DEVICE_PLUGIN_FALLBACK) 272ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_ROLLOUT_DICT = make_dict(ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_ROLLOUT) 273ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_FALLBACK_DICT = make_dict(ANDROID_INSTRUMENTATION_BINARY_STARLARK_RESOURCES_FALLBACK) 274ANDROID_BINARY_STARLARK_JAVAC_ROLLOUT_DICT = make_dict(ANDROID_BINARY_STARLARK_JAVAC_ROLLOUT) 275ANDROID_BINARY_STARLARK_JAVAC_FALLBACK_DICT = make_dict(ANDROID_BINARY_STARLARK_JAVAC_FALLBACK) 276ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_ROLLOUT_DICT = make_dict(ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_ROLLOUT) 277ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_FALLBACK_DICT = make_dict(ANDROID_BINARY_STARLARK_SPLIT_TRANSITION_FALLBACK) 278ANDROID_BINARY_WITH_SANDBOXED_SDKS_ALLOWLIST_DICT = make_dict(ANDROID_BINARY_WITH_SANDBOXED_SDKS_ALLOWLIST) 279ANDROID_FEATURE_SPLITS_DOGFOOD_DICT = make_dict(ANDROID_FEATURE_SPLITS_DOGFOOD) 280ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_DICT = make_dict(ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS) 281ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_GENERATOR_FUNCTIONS_DICT = make_dict(ANDROID_LIBRARY_RESOURCES_WITHOUT_SRCS_GENERATOR_FUNCTIONS) 282ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_FALLBACK_DICT = make_dict(ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_FALLBACK) 283ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_ROLLOUT_DICT = make_dict(ANDROID_LIBRARY_STARLARK_RESOURCE_OUTPUTS_ROLLOUT) 284ANDROID_LINT_CHECKS_FALLBACK_DICT = make_dict(ANDROID_LINT_CHECKS_FALLBACK) 285ANDROID_LINT_CHECKS_ROLLOUT_DICT = make_dict(ANDROID_LINT_CHECKS_ROLLOUT) 286ANDROID_LINT_FALLBACK_DICT = make_dict(ANDROID_LINT_FALLBACK) 287ANDROID_LINT_ROLLOUT_DICT = make_dict(ANDROID_LINT_ROLLOUT) 288 289LINT_REGISTRY_FALLBACK_DICT = make_dict(LINT_REGISTRY_FALLBACK) 290LINT_REGISTRY_ROLLOUT_DICT = make_dict(LINT_REGISTRY_ROLLOUT) 291ANDROID_BUILD_STAMPING_ROLLOUT_DICT = make_dict(ANDROID_BUILD_STAMPING_ROLLOUT) 292ANDROID_BUILD_STAMPING_FALLBACK_DICT = make_dict(ANDROID_BUILD_STAMPING_FALLBACK) 293ANDROID_TEST_LOCKDOWN_GENERATOR_FUNCTIONS_DICT = make_dict(ANDROID_TEST_LOCKDOWN_GENERATOR_FUNCTIONS) 294ANDROID_TEST_LOCKDOWN_TARGETS_DICT = make_dict(ANDROID_TEST_LOCKDOWN_TARGETS) 295APP_INSTALLATION_SNAPSHOT_DICT = make_dict(APP_INSTALLATION_SNAPSHOT) 296APP_INSTALLATION_SNAPSHOT_FALLBACK_DICT = make_dict(APP_INSTALLATION_SNAPSHOT_FALLBACK) 297B122039567_DICT = make_dict(B122039567) 298B123854163_DICT = make_dict(B123854163) 299CAN_USE_DEX2OAT_OPTIONS_DICT = make_dict(CAN_USE_DEX2OAT_OPTIONS) 300FIX_RESOURCE_TRANSIVITY_FALLBACK_DICT = make_dict(FIX_RESOURCE_TRANSITIVITY_FALLBACK) 301FIX_RESOURCE_TRANSIVITY_ROLLOUT_DICT = make_dict(FIX_RESOURCE_TRANSITIVITY_ROLLOUT) 302FIX_EXPORT_EXPORTING_FALLBACK_DICT = make_dict(FIX_EXPORT_EXPORTING_FALLBACK) 303FIX_EXPORT_EXPORTING_ROLLOUT_DICT = make_dict(FIX_EXPORT_EXPORTING_ROLLOUT) 304AIT_USE_HOST_DEX2OAT_ROLLOUT_DICT = make_dict(AIT_USE_HOST_DEX2OAT_ROLLOUT) 305AIT_USE_HOST_DEX2OAT_ROLLOUT_FALLBACK_DICT = make_dict(AIT_USE_HOST_DEX2OAT_ROLLOUT_FALLBACK) 306AIT_INSTALL_APPS_IN_DATA_DICT = make_dict(INSTALL_APPS_IN_DATA) 307LOCAL_TEST_MULTI_PROTO_PKG_DICT = make_dict(LOCAL_TEST_MULTI_PROTO_PKG) 308LOCAL_TEST_FALLBACK_DICT = make_dict(LOCAL_TEST_FALLBACK) 309LOCAL_TEST_ROLLOUT_DICT = make_dict(LOCAL_TEST_ROLLOUT) 310LOCAL_TEST_STARLARK_RESOURCES_FALLBACK_DICT = make_dict(LOCAL_TEST_STARLARK_RESOURCES_FALLBACK) 311LOCAL_TEST_STARLARK_RESOURCES_ROLLOUT_DICT = make_dict(LOCAL_TEST_STARLARK_RESOURCES_ROLLOUT) 312ANDROID_TEST_PLATFORM_FALLBACK_DICT = make_dict(ANDROID_TEST_PLATFORM_FALLBACK) 313ANDROID_TEST_PLATFORM_ROLLOUT_DICT = make_dict(ANDROID_TEST_PLATFORM_ROLLOUT) 314TEST_TO_INSTRUMENT_TEST_FALLBACK_DICT = make_dict(TEST_TO_INSTRUMENT_TEST_FALLBACK) 315TEST_TO_INSTRUMENT_TEST_ROLLOUT_DICT = make_dict(TEST_TO_INSTRUMENT_TEST_ROLLOUT) 316ALLOW_RESOURCE_CONFLICTS_DICT = make_dict(ALLOW_RESOURCE_CONFLICTS) 317PARTIAL_JETIFICATION_TARGETS_ROLLOUT_DICT = make_dict(PARTIAL_JETIFICATION_TARGETS_ROLLOUT) 318PARTIAL_JETIFICATION_TARGETS_FALLBACK_DICT = make_dict(PARTIAL_JETIFICATION_TARGETS_FALLBACK) 319ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_ROLLOUT_DICT = make_dict(ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_ROLLOUT) 320ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_FALLBACK_DICT = make_dict(ANDROID_INSTRUMENTATION_TEST_MANIFEST_CHECK_FALLBACK) 321ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_ROLLOUT_DICT = make_dict(ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_ROLLOUT) 322ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_FALLBACK_DICT = make_dict(ANDROID_INSTRUMENTATION_TEST_PREBUILT_TEST_APK_FALLBACK) 323BASELINE_PROFILES_ROLLOUT_DICT = make_dict(BASELINE_PROFILES_ROLLOUT) 324BASELINE_PROFILES_OPTIMIZER_INTEGRATION_DICT = make_dict(BASELINE_PROFILES_OPTIMIZER_INTEGRATION) 325MIN_SDK_FLOORS_DICT = make_min_sdk_dict(MIN_SDK_FLOORS) 326ANDROID_APK_TO_BUNDLE_FEATURES_DICT = make_dict(ANDROID_APK_TO_BUNDLE_FEATURES) 327ANDROID_LIBRARY_USE_AOSP_AIDL_COMPILER_ALLOWLIST_DICT = make_dict(ANDROID_LIBRARY_USE_AOSP_AIDL_COMPILER_ALLOWLIST) 328ANDROID_LOCAL_TEST_JDK_STS_FALLBACK_DICT = make_dict(ANDROID_LOCAL_TEST_JDK_STS_FALLBACK) 329ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT_DICT = make_dict(ANDROID_LOCAL_TEST_JDK_STS_ROLLOUT) 330DATABINDING_ALLOWED_DICT = make_dict(DATABINDING_ALLOWED) 331DATABINDING_DISALLOWED_DICT = make_dict(DATABINDING_DISALLOWED) 332SHARED_LIBRARY_RESOURCE_LINKING_DICT = make_dict(SHARED_LIBRARY_RESOURCE_LINKING_ALLOWLIST) 333ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_ROLLOUT_DICT = make_dict(ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_ROLLOUT) 334ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_FALLBACK_DICT = make_dict(ANDROID_BINARY_STARLARK_DEX_DESUGAR_PROGUARD_FALLBACK) 335ANDROID_BINARY_MIN_SDK_VERSION_ATTRIBUTE_DICT = make_dict(ANDROID_BINARY_MIN_SDK_VERSION_ATTRIBUTE_ALLOWLIST) 336ANDROID_BINARY_RAW_ACCESS_TO_RESOURCE_PATHS_ALLOWLIST_DICT = make_dict(ANDROID_BINARY_RAW_ACCESS_TO_RESOURCE_PATHS_ALLOWLIST) 337ANDROID_BINARY_RESOURCE_NAME_OBFUSCATION_OPT_OUT_ALLOWLIST_DICT = make_dict(ANDROID_BINARY_RESOURCE_NAME_OBFUSCATION_OPT_OUT_ALLOWLIST) 338ALLOW_PROGUARD_APPLY_MAPPING_DICT = make_dict(ALLOW_PROGUARD_APPLY_MAPPING) 339USE_R8_DICT = make_dict(USE_R8) 340 341def matches(fqn, dct): 342 # Labels with workspace names ("@workspace//pkg:target") are not supported. 343 # For now, default external dependency ACLs to True to enable rollout features for all 344 # external users. See https://github.com/bazelbuild/rules_android/issues/68 345 # Note that this only affects Bazel builds with OSS rules_android. 346 if fqn.startswith("@"): 347 return True 348 349 if not fqn.startswith("//"): 350 fail("Fully qualified target should start with '//', got: " + fqn) 351 352 if fqn in dct: 353 return True 354 355 pkg_and_target = fqn.split(":") 356 if len(pkg_and_target) != 2: 357 fail("Expected fully qualified target, got: " + fqn) 358 pkg = pkg_and_target[0] 359 360 if (pkg + ":__pkg__") in dct: 361 return True 362 363 pkg = pkg.lstrip("//") 364 pkg_parts = pkg.split("/") 365 ancestor_pkg = "//" 366 367 if (ancestor_pkg + ":__subpackages__") in dct: 368 return True 369 370 for pkg_part in pkg_parts: 371 ancestor_pkg = ( 372 (ancestor_pkg + "/" + pkg_part) if ancestor_pkg != "//" else ("//" + pkg_part) 373 ) 374 if (ancestor_pkg + ":__subpackages__") in dct: 375 return True 376 377 return False 378 379acls = struct( 380 get_android_archive_duplicate_class_allowlist = _get_android_archive_duplicate_class_allowlist, 381 get_android_archive_exposed_package_allowlist = _get_android_archive_exposed_package_allowlist, 382 get_min_sdk_floor = _get_min_sdk_floor, 383 in_aar_import_deps_checker = _in_aar_import_deps_checker, 384 in_aar_import_explicit_exports_manifest = _in_aar_import_explicit_exports_manifest, 385 in_aar_import_exports_r_java = _in_aar_import_exports_r_java, 386 in_aar_propagate_resources = _in_aar_propagate_resources, 387 in_b122039567 = _in_b122039567, 388 in_b123854163 = _in_b123854163, 389 in_android_archive_dogfood = _in_android_archive_dogfood, 390 in_android_archive_excluded_deps_denylist = _in_android_archive_excluded_deps_denylist, 391 in_android_device_plugin_rollout = _in_android_device_plugin_rollout, 392 in_android_instrumentation_binary_starlark_resources = _in_android_instrumentation_binary_starlark_resources, 393 in_android_binary_starlark_javac = _in_android_binary_starlark_javac, 394 in_android_binary_starlark_split_transition = _in_android_binary_starlark_split_transition, 395 in_android_binary_with_sandboxed_sdks_allowlist = _in_android_binary_with_sandboxed_sdks_allowlist, 396 in_android_feature_splits_dogfood = _in_android_feature_splits_dogfood, 397 in_android_library_starlark_resource_outputs_rollout = _in_android_library_starlark_resource_outputs_rollout, 398 in_android_library_resources_without_srcs = _in_android_library_resources_without_srcs, 399 in_android_library_resources_without_srcs_generator_functions = _in_android_library_resources_without_srcs_generator_functions, 400 in_android_library_use_aosp_aidl_compiler_allowlist = _in_android_library_use_aosp_aidl_compiler_allowlist, 401 in_android_lint_checks_rollout = _in_android_lint_checks_rollout, 402 in_android_lint_rollout = _in_android_lint_rollout, 403 in_lint_registry_rollout = _in_lint_registry_rollout, 404 in_android_build_stamping_rollout = _in_android_build_stamping_rollout, 405 in_android_test_lockdown_allowlist = _in_android_test_lockdown_allowlist, 406 in_app_installation_snapshot = _in_app_installation_snapshot, 407 in_databinding_allowed = _in_databinding_allowed, 408 in_dex2oat_opts = _in_dex2oat_opts, 409 in_fix_export_exporting_rollout = _in_fix_export_exporting_rollout, 410 in_fix_resource_transivity_rollout = _in_fix_resource_transivity_rollout, 411 in_host_dex2oat_rollout = _in_host_dex2oat_rollout, 412 in_install_apps_in_data = _in_install_apps_in_data, 413 in_local_test_multi_proto = _in_local_test_multi_proto, 414 in_local_test_rollout = _in_local_test_rollout, 415 in_local_test_starlark_resources = _in_local_test_starlark_resources, 416 in_android_test_platform_rollout = _in_android_test_platform_rollout, 417 in_test_to_instrument_test_rollout = _in_test_to_instrument_test_rollout, 418 in_allow_resource_conflicts = _in_allow_resource_conflicts, 419 in_partial_jetification_targets = _in_partial_jetification_targets, 420 in_android_instrumentation_test_manifest_check_rollout = _in_android_instrumentation_test_manifest_check_rollout, 421 in_android_instrumentation_test_prebuilt_test_apk = _in_android_instrumentation_test_prebuilt_test_apk, 422 in_baseline_profiles_rollout = _in_baseline_profiles_rollout, 423 in_baseline_profiles_optimizer_integration = _in_baseline_profiles_optimizer_integration, 424 in_android_apk_to_bundle_features = _in_android_apk_to_bundle_features, 425 in_android_local_test_jdk_sts_rollout = _in_android_local_test_jdk_sts_rollout, 426 in_shared_library_resource_linking_allowlist = _in_shared_library_resource_linking_allowlist, 427 in_android_binary_starlark_dex_desugar_proguard = _in_android_binary_starlark_dex_desugar_proguard, 428 in_android_binary_min_sdk_version_attribute_allowlist = _in_android_binary_min_sdk_version_attribute_allowlist, 429 in_android_binary_raw_access_to_resource_paths_allowlist = _in_android_binary_raw_access_to_resource_paths_allowlist, 430 in_android_binary_resource_name_obfuscation_opt_out_allowlist = _in_android_binary_resource_name_obfuscation_opt_out_allowlist, 431 in_allow_proguard_apply_mapping = _in_allow_proguard_apply_mapping, 432 use_r8 = _use_r8, 433) 434 435# Visible for testing 436testing = struct( 437 matches = matches, 438 make_dict = make_dict, 439) 440