1# Copyright (c) 2023-2024 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the "License");
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14import("//build/ohos.gni")
15import("../../../code_signature.gni")
16
17config("public_code_sign_utils_configs") {
18  include_dirs = [ "include" ]
19}
20
21ohos_shared_library("libcode_sign_utils") {
22  sanitize = {
23    cfi = true
24    cfi_cross_dso = true
25    debug = false
26  }
27  branch_protector_ret = "pac_ret"
28  sources = [
29    "${code_signature_root_dir}/utils/src/code_sign_block.cpp",
30    "${code_signature_root_dir}/utils/src/file_helper.cpp",
31    "src/code_sign_enable_multi_task.cpp",
32    "src/code_sign_helper.cpp",
33    "src/code_sign_utils.cpp",
34    "src/code_sign_utils_in_c.cpp",
35    "src/stat_utils.cpp",
36  ]
37  version_script = "libcode_sign_utils.versionscript"
38  cflags_cc = [
39    "-Os",
40    "-fno-asynchronous-unwind-tables",
41    "-fno-unwind-tables",
42  ]
43  public_configs = [
44    "${code_signature_root_dir}:common_public_config",
45    "${code_signature_root_dir}/services/key_enable:key_enable_rust_interface_config",
46    ":public_code_sign_utils_configs",
47  ]
48  configs = [ "${code_signature_root_dir}:common_utils_config" ]
49
50  deps = [ "${code_signature_root_dir}/utils:fsverity_sign_src_set" ]
51  if (host_os == "linux" && !is_asan && !ohos_indep_compiler_enable &&
52      !use_clang_coverage) {
53    deps += [ "${code_signature_root_dir}/services/key_enable:key_enable_lib" ]
54  } else {
55    sources += [ "${code_signature_root_dir}/services/key_enable/src/asan/disable_rust_interface.cpp" ]
56  }
57  defines = []
58  if (code_signature_support_oh_code_sign) {
59    defines += [ "SUPPORT_OH_CODE_SIGN" ]
60  }
61  if (build_variant == "root" || code_signature_enable_xpm_mode == 0) {
62    defines += [ "SUPPORT_PERMISSIVE_MODE" ]
63  }
64  external_deps = [
65    "ability_base:extractortool",
66    "appverify:libhapverify",
67    "c_utils:utils",
68    "hilog:libhilog",
69    "hisysevent:libhisysevent",
70    "hitrace:hitrace_meter",
71    "openssl:libcrypto_shared",
72  ]
73  install_enable = true
74
75  part_name = "code_signature"
76
77  subsystem_name = "security"
78
79  install_images = [ "system" ]
80}
81