OSDN Git Service

Remove androidboot.selinux=permissive from cmdline
authorChih-Wei Huang <cwhuang@linux.org.tw>
Sat, 23 Nov 2019 03:56:57 +0000 (11:56 +0800)
committerChih-Wei Huang <cwhuang@linux.org.tw>
Sat, 23 Nov 2019 03:56:57 +0000 (11:56 +0800)
The default selinux mode is set to permissive in init. If you want to
use enforcing mode, add androidboot.selinux=enforcing to cmdline.

BoardConfig.mk

index 7ab0e17..3f7e7f1 100644 (file)
@@ -78,7 +78,7 @@ ifneq ($(strip $(BOARD_GPU_DRIVERS)),)
 TARGET_HARDWARE_3D := true
 endif
 
-BOARD_KERNEL_CMDLINE := root=/dev/ram0 androidboot.selinux=permissive$(if $(filter x86_64,$(TARGET_ARCH) $(TARGET_KERNEL_ARCH)),, vmalloc=192M)
+BOARD_KERNEL_CMDLINE := root=/dev/ram0$(if $(filter x86_64,$(TARGET_ARCH) $(TARGET_KERNEL_ARCH)),, vmalloc=192M)
 TARGET_KERNEL_DIFFCONFIG := device/generic/common/selinux_diffconfig
 
 COMPATIBILITY_ENHANCEMENT_PACKAGE := true