Skip to content
Snippets Groups Projects
Commit c51e4442 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

DO NOT MERGE: Flip FORCE_PERMISSIVE_TO_UNCONFINED to true

Force any experimental SELinux domains (ones tagged with
"permissive_or_unconfined") into unconfined. This flag is
intended to be flipped when we're preparing a release,
to eliminate inconsistencies between user and userdebug devices,
and to ensure that we're enforcing a minimal set of rules for all
SELinux domains.

Without this change, our user builds will behave differently than
userdebug builds, complicating testing.

Change-Id: Ia43d185638336e545a7556c3a0ddf0f34e053706
parent 4d7353f7
No related branches found
No related tags found
No related merge requests found
...@@ -11,7 +11,7 @@ include $(CLEAR_VARS) ...@@ -11,7 +11,7 @@ include $(CLEAR_VARS)
# is frozen, we should flip this to true. This forces any currently # is frozen, we should flip this to true. This forces any currently
# permissive domains into unconfined+enforcing. # permissive domains into unconfined+enforcing.
# #
FORCE_PERMISSIVE_TO_UNCONFINED:=false FORCE_PERMISSIVE_TO_UNCONFINED:=true
ifeq ($(TARGET_BUILD_VARIANT),user) ifeq ($(TARGET_BUILD_VARIANT),user)
# User builds are always forced unconfined+enforcing # User builds are always forced unconfined+enforcing
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment