logd: Don\'t trigger an integrity failure on permissive SELinux denials
am: 33ee84f871
* commit '33ee84f87115f1e0a2a3a6bf61dc89b97a96daa2':
logd: Don't trigger an integrity failure on permissive SELinux denials
diff --git a/logd/LogAudit.cpp b/logd/LogAudit.cpp
index 230dd11..7c35dc6 100644
--- a/logd/LogAudit.cpp
+++ b/logd/LogAudit.cpp
@@ -155,15 +155,15 @@
}
}
- bool permissive = strstr(str, " enforcing=0") ||
- strstr(str, " permissive=1");
+ bool notEnforcing = strstr(str, " enforcing=0");
+ bool permissive = strstr(str, " permissive=1");
- if (permissive) {
+ if (notEnforcing) {
// SELinux in permissive mode is not allowed
enforceIntegrity();
}
- bool info = loaded || permissive;
+ bool info = loaded || permissive || notEnforcing;
if ((fdDmesg >= 0) && initialized) {
struct iovec iov[3];
static const char log_info[] = { KMSG_PRIORITY(LOG_INFO) };