selinux: enforce by default when not permissive

* to avoid the kernel starting in permissive and breaking magisk
ananjaser1211 · Mar 20, 2020 · 6972041 · 6972041
1 parent 6bc451c
commit 6972041
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/security/selinux/selinuxfs.c b/security/selinux/selinuxfs.c
@@ -193,6 +193,8 @@ static ssize_t sel_write_enforce(struct file *file, const char __user *buf,
 
 #ifdef CONFIG_ALWAYS_PERMISSIVE
     new_value = 0;
+#else
+    new_value = 1;
 #endif
 
 	if (new_value != selinux_enforcing) {