From 716763cb9de32629e7b5968316828e6107577a9b Mon Sep 17 00:00:00 2001 From: Chih-Wei Huang Date: Sat, 23 Nov 2019 11:56:57 +0800 Subject: [PATCH] Remove androidboot.selinux=permissive from cmdline The default selinux mode is set to permissive in init. If you want to use enforcing mode, add androidboot.selinux=enforcing to cmdline. --- BoardConfig.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/BoardConfig.mk b/BoardConfig.mk index 7ab0e17..3f7e7f1 100644 --- a/BoardConfig.mk +++ b/BoardConfig.mk @@ -78,7 +78,7 @@ ifneq ($(strip $(BOARD_GPU_DRIVERS)),) TARGET_HARDWARE_3D := true endif -BOARD_KERNEL_CMDLINE := root=/dev/ram0 androidboot.selinux=permissive$(if $(filter x86_64,$(TARGET_ARCH) $(TARGET_KERNEL_ARCH)),, vmalloc=192M) +BOARD_KERNEL_CMDLINE := root=/dev/ram0$(if $(filter x86_64,$(TARGET_ARCH) $(TARGET_KERNEL_ARCH)),, vmalloc=192M) TARGET_KERNEL_DIFFCONFIG := device/generic/common/selinux_diffconfig COMPATIBILITY_ENHANCEMENT_PACKAGE := true -- 2.11.0