1# Copyright (c) 2021-2024 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the "License");
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14import("//build/ohos.gni")
15import("../../access_token.gni")
16
17ohos_prebuilt_etc("access_token.rc") {
18  source = "access_token.cfg"
19  relative_install_dir = "init"
20  subsystem_name = "security"
21  part_name = "access_token"
22}
23
24ohos_prebuilt_etc("permission_definition_config") {
25  source = "permission_definitions.json"
26  part_name = "access_token"
27  subsystem_name = "security"
28  relative_install_dir = "access_token"
29}
30
31if (is_standard_system) {
32  ohos_shared_library("accesstoken_manager_service") {
33    subsystem_name = "security"
34    part_name = "access_token"
35    sanitize = {
36      cfi = true
37      cfi_cross_dso = true
38      debug = false
39    }
40    branch_protector_ret = "pac_ret"
41    if (!use_clang_coverage) {
42      version_script = "accesstoken_manager_service.map"
43      shlib_type = "sa"
44    }
45
46    include_dirs = [
47      "${access_token_path}/frameworks/accesstoken/include",
48      "${access_token_path}/frameworks/common/include",
49      "${access_token_path}/frameworks/privacy/include",
50      "${access_token_path}/frameworks/tokensync/include",
51      "${access_token_path}/interfaces/innerkits/accesstoken/include",
52      "${access_token_path}/interfaces/innerkits/privacy/include",
53      "${access_token_path}/interfaces/innerkits/tokensync/src",
54      "${access_token_path}/services/common/app_manager/include",
55      "${access_token_path}/services/common/config_policy/include",
56      "${access_token_path}/services/common/database/include",
57      "${access_token_path}/services/common/handler/include",
58      "${access_token_path}/services/common/libraryloader/include",
59      "${access_token_path}/services/common/utils/include",
60      "main/cpp/include/callback",
61      "main/cpp/include/database",
62      "main/cpp/include/dfx",
63      "main/cpp/include/service",
64      "main/cpp/include/form_manager",
65      "main/cpp/include/token",
66      "main/cpp/include/permission",
67    ]
68
69    include_dirs += access_token_impl_include_dirs
70
71    sources = [
72      "main/cpp/src/callback/accesstoken_callback_proxys.cpp",
73      "main/cpp/src/callback/callback_death_recipients.cpp",
74      "main/cpp/src/callback/callback_manager.cpp",
75      "main/cpp/src/database/access_token_db.cpp",
76      "main/cpp/src/database/access_token_db_util.cpp",
77      "main/cpp/src/database/access_token_open_callback.cpp",
78      "main/cpp/src/database/data_translator.cpp",
79      "main/cpp/src/database/token_field_const.cpp",
80      "main/cpp/src/dfx/hisysevent_adapter.cpp",
81      "main/cpp/src/form_manager/form_instance.cpp",
82      "main/cpp/src/form_manager/form_manager_access_client.cpp",
83      "main/cpp/src/form_manager/form_manager_access_proxy.cpp",
84      "main/cpp/src/form_manager/form_manager_death_recipient.cpp",
85      "main/cpp/src/form_manager/form_status_change_callback.cpp",
86      "main/cpp/src/form_manager/running_form_info.cpp",
87      "main/cpp/src/permission/permission_definition_cache.cpp",
88      "main/cpp/src/permission/permission_definition_parser.cpp",
89      "main/cpp/src/permission/permission_grant_event.cpp",
90      "main/cpp/src/permission/permission_manager.cpp",
91      "main/cpp/src/permission/permission_policy_set.cpp",
92      "main/cpp/src/permission/permission_validator.cpp",
93      "main/cpp/src/permission/short_grant_manager.cpp",
94      "main/cpp/src/permission/temp_permission_observer.cpp",
95      "main/cpp/src/service/accesstoken_manager_service.cpp",
96      "main/cpp/src/service/accesstoken_manager_stub.cpp",
97      "main/cpp/src/token/accesstoken_id_manager.cpp",
98      "main/cpp/src/token/accesstoken_info_manager.cpp",
99      "main/cpp/src/token/hap_token_info_inner.cpp",
100      "main/cpp/src/token/native_token_info_inner.cpp",
101      "main/cpp/src/token/native_token_receptor.cpp",
102    ]
103    sources += access_token_impl_sources
104
105    cflags_cc = [
106      "-DHILOG_ENABLE",
107      "-fvisibility=hidden",
108    ]
109    configs = [
110      "${access_token_path}/config:access_token_compile_flags",
111      "${access_token_path}/config:coverage_flags",
112    ]
113
114    if (dlp_permission_enable == true) {
115      cflags_cc += [ "-DSUPPORT_SANDBOX_APP" ]
116      sources += [
117        "main/cpp/src/permission/dlp_permission_set_manager.cpp",
118        "main/cpp/src/permission/dlp_permission_set_parser.cpp",
119      ]
120    }
121
122    if (build_variant == "user") {
123      cflags_cc += [ "-DATM_BUILD_VARIANT_USER_ENABLE" ]
124    }
125
126    deps = [
127      "${access_token_path}/frameworks/accesstoken:accesstoken_communication_adapter_cxx",
128      "${access_token_path}/frameworks/common:accesstoken_common_cxx",
129      "${access_token_path}/interfaces/innerkits/accesstoken:libtokenid_sdk",
130      "${access_token_path}/interfaces/innerkits/token_setproc:libperm_setproc",
131      "${access_token_path}/interfaces/innerkits/token_setproc:libtoken_setproc",
132      "${access_token_path}/services/accesstokenmanager:access_token.rc",
133      "${access_token_path}/services/accesstokenmanager:permission_definition_config",
134      "${access_token_path}/services/common:accesstoken_service_common",
135    ]
136
137    deps += [ "etc:param_files" ]
138
139    external_deps = [
140      "c_utils:utils",
141      "hilog:libhilog",
142      "hisysevent:libhisysevent",
143      "init:libbegetutil",
144      "ipc:ipc_core",
145      "json:nlohmann_json_static",
146      "relational_store:native_rdb",
147      "safwk:system_ability_fwk",
148      "samgr:samgr_proxy",
149    ]
150
151    if (ohos_indep_compiler_enable) {
152      external_deps += [ "bounds_checking_function:libsec_shared" ]
153    }
154
155    if (eventhandler_enable == true) {
156      cflags_cc += [ "-DEVENTHANDLER_ENABLE" ]
157      external_deps += [ "eventhandler:libeventhandler" ]
158    }
159
160    if (hicollie_enable == true) {
161      external_deps += [ "hicollie:libhicollie" ]
162      cflags_cc += [ "-DHICOLLIE_ENABLE" ]
163    }
164
165    if (token_sync_enable == true) {
166      cflags_cc += [ "-DTOKEN_SYNC_ENABLE" ]
167
168      sources += [
169        "main/cpp/src/token/accesstoken_remote_token_manager.cpp",
170        "main/cpp/src/token/token_modify_notifier.cpp",
171      ]
172
173      include_dirs +=
174          [ "${access_token_path}/interfaces/innerkits/tokensync/include" ]
175
176      external_deps += [ "device_manager:devicemanagersdk" ]
177    }
178
179    if (hiviewdfx_hitrace_native_enable == true) {
180      cflags_cc += [ "-DHITRACE_NATIVE_ENABLE" ]
181
182      external_deps += [ "hitrace:hitrace_meter" ]
183    }
184
185    if (resourceschedule_ffrt_enable) {
186      external_deps += [ "ffrt:libffrt" ]
187      cflags_cc += [ "-DRESOURCESCHEDULE_FFRT_ENABLE" ]
188    }
189
190    if (access_token_background_task_mgr_continuous_task_enable == true) {
191      cflags_cc += [ "-DBGTASKMGR_CONTINUOUS_TASK_ENABLE" ]
192      include_dirs += [
193        "${access_token_path}/services/common/background_task_manager/include",
194      ]
195      sources += [
196        "${access_token_path}/services/common/background_task_manager/src/background_task_manager_access_client.cpp",
197        "${access_token_path}/services/common/background_task_manager/src/background_task_manager_access_proxy.cpp",
198        "${access_token_path}/services/common/background_task_manager/src/background_task_manager_death_recipient.cpp",
199        "${access_token_path}/services/common/background_task_manager/src/continuous_task_callback_info.cpp",
200        "${access_token_path}/services/common/background_task_manager/src/continuous_task_change_callback.cpp",
201      ]
202    }
203  }
204}
205