diff options
| author | Nick Kralevich <nnk@google.com> | 2014-06-02 20:56:04 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2014-06-02 20:56:04 -0700 |
| commit | f3c85b2488529404a170a28f9bc72538b1ace97d (patch) | |
| tree | 04ed6010c0de3de6c6a4f08ee1809b7c4986709b /init/init.c | |
| parent | 676f7d509d683921335ccddc2f267a73eb5c60c6 (diff) | |
| download | system_core-f3c85b2488529404a170a28f9bc72538b1ace97d.zip system_core-f3c85b2488529404a170a28f9bc72538b1ace97d.tar.gz system_core-f3c85b2488529404a170a28f9bc72538b1ace97d.tar.bz2 | |
Only allow disabling SELinux on userdebug / eng builds
Only parse and honor the kernel command line on userdebug
or eng builds. On user builds, assume that selinux is always enabled
and enforcing.
Change-Id: I71c66e4365bdf2f226800634126a38b716d96599
Diffstat (limited to 'init/init.c')
| -rw-r--r-- | init/init.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/init/init.c b/init/init.c index 7ba25dc..c79929b 100644 --- a/init/init.c +++ b/init/init.c @@ -868,6 +868,7 @@ void selinux_init_all_handles(void) static bool selinux_is_disabled(void) { +#ifdef ALLOW_DISABLE_SELINUX char tmp[PROP_VALUE_MAX]; if (access("/sys/fs/selinux", F_OK) != 0) { @@ -881,12 +882,14 @@ static bool selinux_is_disabled(void) /* SELinux is compiled into the kernel, but we've been told to disable it. */ return true; } +#endif return false; } static bool selinux_is_enforcing(void) { +#ifdef ALLOW_DISABLE_SELINUX char tmp[PROP_VALUE_MAX]; if (property_get("ro.boot.selinux", tmp) == 0) { @@ -903,6 +906,7 @@ static bool selinux_is_enforcing(void) ERROR("SELinux: Unknown value of ro.boot.selinux. Got: \"%s\". Assuming enforcing.\n", tmp); } +#endif return true; } |