From 94995c683c397ec55f337caeae1e3ec116112027 Mon Sep 17 00:00:00 2001 From: bgman111111 <otkadeto@yahoo.com> Date: Thu, 30 Dec 2021 19:42:13 +0100 Subject: [PATCH] config SECURITY_SELINUX_DEVELOP bool "NSA SELinux Development Support" depends on SECURITY_SELINUX #ifndef OPLUS_FEATURE_FORCE_SELINUX #Haoran.Zhang@ANDROID.BUILD, 2020/01/10, modify for unset SECURITY_SELINUX_DEVELOP #default n #else OPLUS_FEATURE_FORCE_SELINUX default y #endif OPLUS_FEATURE_FORCE_SELINUX help This enables the development support option of NSA SELinux, which is useful for experimenting with SELinux and developing policies. If unsure, say Y. With this option enabled, the kernel will start in permissive mode (log everything, deny nothing) unless you specify enforcing=1 on the kernel command line. You can interactively toggle the kernel between enforcing mode and permissive mode (if permitted by the policy) via /selinux/enforce. --- security/selinux/Kconfig | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/security/selinux/Kconfig b/security/selinux/Kconfig index fc7815b13835..4b674d0ea2a5 100755 --- a/security/selinux/Kconfig +++ b/security/selinux/Kconfig @@ -63,9 +63,9 @@ config SECURITY_SELINUX_DEVELOP depends on SECURITY_SELINUX #ifndef OPLUS_FEATURE_FORCE_SELINUX #Haoran.Zhang@ANDROID.BUILD, 2020/01/10, modify for unset SECURITY_SELINUX_DEVELOP - #default y + #default n #else OPLUS_FEATURE_FORCE_SELINUX - default n + default y #endif OPLUS_FEATURE_FORCE_SELINUX help This enables the development support option of NSA SELinux, -- GitLab