1# Copyright (c) 2023-2024 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the "License");
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14import("//build/ohos.gni")
15import("../../../code_signature.gni")
16
17config("public_code_sign_utils_configs") {
18  include_dirs = [ "include" ]
19}
20
21ohos_shared_library("libcode_sign_utils") {
22  sanitize = {
23    cfi = true
24    cfi_cross_dso = true
25    debug = false
26  }
27  branch_protector_ret = "pac_ret"
28  sources = [
29    "${code_signature_root_dir}/utils/src/code_sign_block.cpp",
30    "${code_signature_root_dir}/utils/src/file_helper.cpp",
31    "src/code_sign_enable_multi_task.cpp",
32    "src/code_sign_helper.cpp",
33    "src/code_sign_utils.cpp",
34    "src/code_sign_utils_in_c.cpp",
35    "src/stat_utils.cpp",
36  ]
37  public_configs = [
38    "${code_signature_root_dir}:common_public_config",
39    "${code_signature_root_dir}/services/key_enable:key_enable_rust_interface_config",
40    ":public_code_sign_utils_configs",
41  ]
42  configs = [ "${code_signature_root_dir}:common_utils_config" ]
43
44  deps = [ "${code_signature_root_dir}/utils:fsverity_sign_src_set" ]
45  if (host_os == "linux" && !is_asan && !ohos_indep_compiler_enable &&
46      !use_clang_coverage) {
47    deps += [ "${code_signature_root_dir}/services/key_enable:key_enable_lib" ]
48  } else {
49    sources += [ "${code_signature_root_dir}/services/key_enable/src/asan/disable_rust_interface.cpp" ]
50  }
51  defines = []
52  if (code_signature_support_oh_code_sign) {
53    defines += [ "SUPPORT_OH_CODE_SIGN" ]
54  }
55  if (build_variant == "root" || code_signature_enable_xpm_mode == 0) {
56    defines += [ "SUPPORT_PERMISSIVE_MODE" ]
57  }
58  external_deps = [
59    "ability_base:extractortool",
60    "appverify:libhapverify",
61    "c_utils:utils",
62    "hilog:libhilog",
63    "hisysevent:libhisysevent",
64    "hitrace:hitrace_meter",
65    "openssl:libcrypto_shared",
66  ]
67  install_enable = true
68
69  part_name = "code_signature"
70
71  subsystem_name = "security"
72
73  install_images = [ "system" ]
74}
75