android selinux

/system/core/init/init.cpp

static bool selinux_is_enforcing(void)
{
    return false; //force set selinux permissive.
    if (ALLOW_PERMISSIVE_SELINUX) {
        return selinux_status_from_cmdline() == SELINUX_ENFORCING;
    }
    return true;
}

P0:

/system/core/init/selinux.cpp

bool IsEnforcing() {
 return false; //force set selinux permissive.
 if (ALLOW_PERMISSIVE_SELINUX) {
 return StatusFromCmdline() == SELINUX_ENFORCING;
 }
 return true;
}

 

R0 之后的 user load，

还需要在 alps/kernel-x.xx/arch/armxx/configs/xxxx_defconfig (比如：alps/kernel-4.14/arch/arm64/configs/k69v1_64_tee_cts_defconfig，注意：不是 xxxx_debug_defconfig)中，

配置：

CONFIG_SECURITY_SELINUX_DEVELOP=y