diff options
| -rw-r--r-- | services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java b/services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java index e8337f60d7c3..0ab86e447ad9 100644 --- a/services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java +++ b/services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java @@ -122,9 +122,16 @@ public class SELinuxPolicyInstallReceiver extends ConfigUpdateInstallReceiver { } private void setEnforcingMode(Context context) { - boolean mode = Settings.Global.getInt(context.getContentResolver(), - Settings.Global.SELINUX_STATUS, 0) == 1; - SELinux.setSELinuxEnforce(mode); + String mode = Settings.Global.getString(context.getContentResolver(), + Settings.Global.SELINUX_STATUS); + if (mode.equals("1")) { + Slog.i(TAG, "Setting enforcing mode"); + SystemProperties.set("persist.selinux.enforcing", mode); + } else if (mode.equals("0")) { + Slog.i(TAG, "Tried to set permissive mode, ignoring"); + } else { + Slog.e(TAG, "Got invalid enforcing mode: " + mode); + } } @Override |