commit b89bdfde422eff751b3f939f10ab57e22af83eaa
author repo sync <gcondra@google.com> Wed Apr 24 11:18:29 2013 -0700
committer repo sync <gcondra@google.com> Thu Apr 25 14:19:16 2013 -0700
tree aecc1341fc19309b5bcc9a3fc20c4dc81bf7c886
parent 7ee2e26eb98da10eaddf5a8e864d508cceab946b

Add persistent property for SELinux enforcment status.

Also adds triggers for going between enforcing and
permissive status.

Bug: 8702843
Change-Id: I841d80999b96acf6b6fd0a5408fb074952d6ae72

init/property_service.c

diff --git a/init/property_service.c b/init/property_service.c
index 5780001..3248399 100755
--- a/init/property_service.c
+++ b/init/property_service.c
@@ -91,6 +91,7 @@
     { "persist.service.", AID_SYSTEM,   0 },
     { "persist.security.", AID_SYSTEM,   0 },
     { "persist.service.bdroid.", AID_BLUETOOTH,   0 },
+    { "persist.selinux.enforcing", AID_SYSTEM,  0},
     { "selinux."         , AID_SYSTEM,   0 },
     { NULL, 0, 0 }
 };

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 89ec18a..fc98f80 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -409,6 +409,12 @@
     restart ueventd
     restart installd
 
+on property:persist.selinux.enforcing=1
+    setenforce 1
+
+on property:persist.selinux.enforcing=0
+    setenforce 0
+
 service console /system/bin/sh
     class core
     console