.. | .. |
---|
97 | 97 | } |
---|
98 | 98 | |
---|
99 | 99 | bool IsEnforcing() { |
---|
| 100 | + //edit by ronnie at 20220413 |
---|
| 101 | + return false; |
---|
100 | 102 | if (ALLOW_PERMISSIVE_SELINUX) { |
---|
101 | 103 | return StatusFromCmdline() == SELINUX_ENFORCING; |
---|
102 | 104 | } |
---|
.. | .. |
---|
430 | 432 | |
---|
431 | 433 | bool kernel_enforcing = (security_getenforce() == 1); |
---|
432 | 434 | bool is_enforcing = IsEnforcing(); |
---|
| 435 | + is_enforcing=false;//by Lyle,220111 |
---|
| 436 | + security_setenforce(is_enforcing);//by Lyle,220111 |
---|
433 | 437 | if (kernel_enforcing != is_enforcing) { |
---|
434 | 438 | if (security_setenforce(is_enforcing)) { |
---|
435 | 439 | PLOG(FATAL) << "security_setenforce(%s) failed" << (is_enforcing ? "true" : "false"); |
---|