Database Users

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3

Hi to all
I want to found a simple solution(other a kernel) to change SELinux from Enforcing to Permissive on Samsung Galaxy Note SM-N9005 on MJ7 firmware.
Because I want to install LBE SECURITY and it don't work with statu Enforcing.
Thanks for all way Friends

Why not change kernel?
Sent from my SM-N9005 using xda app-developers app

Kernel was not stable and make some error with last firmware(camera ,spen ...)

as things look right now a custom kernel is the only way to get selinux = permissive.
But if you looking for privacy stuff use xposed with xprivacy module.
Beats LBE and all the other crap

Thanks for idea xprivacy module Zroice but Not a modification with edit the build existing ?
Envoyé de mon SM-N9005 en utilisant Tapatalk

On S4 Mini I9195 now whit Knox and stock kernel...
To turn SELinux from Enforcing to Permissive I make this on Terminal Emulator:
su
pm disable com.sec.knox.seandroid
-- wait for killed...
setenforce 0
But here on Note 3 not work.
Can someone study this way on N9005?
Thanks

Fast click 3-4x on "SELinux Status" in "About Tablet" (or "About Phone") should work too to switch between permissive and enforceing.

Lol not.
hit 'thanks' if i helped you
SM-N9005 DBT-DMJ7 0x0
XDA Developers 4 premium app

Wanam xposed can change it, it worked for me, stock mk2 stock kernel
Sent from my SM-N900 using xda app-developers app

*GalaxyDev* said:
Wanam xposed can change it, it worked for me, stock mk2 stock kernel
Sent from my SM-N900 using xda app-developers app
Click to expand...
Click to collapse
I did wonder if Wanam done it as it was deemed "Experimental" -- interesting to know it works though.. I keep mine enforced on custom kernel, no real need for me to have Permissive atm.

SELinux enforcing mode Galaxy S5
I have Galaxy S5 SM-G900F, the problem is I cant use Chainfire Stickmount or Paragon exFAT, NTFS, HFS+. These are the only SU apps that I want to use but will not work without SELinux being set to permissive mode. I have sent the logs for Paragon to the developers in the hope they can make some changes to bypass the MAC my SELinux is imposing.
When I installed ChainFireAutoRoot and ran SuperSU it warned about KNOX and disabled KNOX. KNOX counter at 0x1 after root.
I have tried adb shell su 0 -c "setenforce 0"
rebooted
still enforcing mode
Can someone explain to me, is it actually the boot loader setting SElinux mode?

I have this problem also

One possible way is downloading wanam xposed.
Then go to security hacks
then change selinux from enforcing to permissive
good luck!:fingers-crossed:

Thanks. But that did not work.

boogieb4 said:
Thanks. But that did not work.
Click to expand...
Click to collapse
flash lean kernel, any civz kernel, xnote kernel ...
selinux is set by the kernel

Is it possible to flash any rooms while status is enforcing.

boogieb4 said:
Is it possible to flash any rooms while status is enforcing.
Click to expand...
Click to collapse
Try the Ultimate Kernel v64.. it fix many problems i had with lean kernel and permissive forced on wanamite.
Chooo

boogieb4 said:
Is it possible to flash any rooms while status is enforcing.
Click to expand...
Click to collapse
My experience with Note 3 (SM-N9005) is that any rom can be flashed while selinux status is enforcing
Sent from my SM-N9005 using XDA Free mobile app

How to change enforcing to permissive in My SM-G532F

Bhadran said:
How to change enforcing to permissive in My SM-G532F
Click to expand...
Click to collapse
This is not your phones forum its NOTE 3 forum.

[KNOX]

KERNEL IS NOT SEANDROID ENFORCING
Set Warranty Bit: kernel
How do I stop this from showing when I boot my phone?

synthecypher said:
KERNEL IS NOT SEANDROID ENFORCING
Set Warranty Bit: kernel
How do I stop this from showing when I boot my phone?
Click to expand...
Click to collapse
You can't its triggerd

KingOfDope said:
You can't its triggerd
Click to expand...
Click to collapse
So frustrating it was triggered by ROM Manager.
It asked me if I wanted to disable KNOX as it could cause problems. I didn't realise our want reversible.
Surely if I revert to a ROM using stock kernel if should go away?

synthecypher said:
So frustrating it was triggered by ROM Manager.
It asked me if I wanted to disable KNOX as it could cause problems. I didn't realise our want reversible.
Surely if I revert to a ROM using stock kernel if should go away?
Click to expand...
Click to collapse
unfortunately no KNOX is a hardware (eFuses) thing. Maybe in the future somebody can disable it Look in this thread : LINK they said that Samsung has a tool that can reset it but nobody from the outside got a hand on it

Need a kernel.

Hi .
Im looking for a samsung kernel with selinux turned off. It doesnt need to be special , or have special stuff included ... something like stock but with selinux disabled so i can install linux on my note 3.
Ive looked around and found that some of the most known ones might have selinux permissive but list stuff like "random reboots while using phone" or "sms not working" or "freezes up with any language except usa english"... I kinda use my phone so does anyone have a stock kernel with simply selinux as permissive that actually still allows the phone to work normally ?
SM-N9005 international note 3 , rooted with knox 0x0 atm.
Thanks

Lean kernel
siriom said:
Hi .
Im looking for a samsung kernel with selinux turned off. It doesnt need to be special , or have special stuff included ... something like stock but with selinux disabled so i can install linux on my note 3.
Ive looked around and found that some of the most known ones might have selinux permissive but list stuff like "random reboots while using phone" or "sms not working" or "freezes up with any language except usa english"... I kinda use my phone so does anyone have a stock kernel with simply selinux as permissive that actually still allows the phone to work normally ?
SM-N9005 international note 3 , rooted with knox 0x0 atm.
Thanks
Click to expand...
Click to collapse
Lean kernel is the best!!
---------- Post added at 03:46 AM ---------- Previous post was at 03:08 AM ----------
ultimate kernel is also one of the best kernel out there

siriom said:
Hi .
Im looking for a samsung kernel with selinux turned off. It doesnt need to be special , or have special stuff included ... something like stock but with selinux disabled so i can install linux on my note 3.
Ive looked around and found that some of the most known ones might have selinux permissive but list stuff like "random reboots while using phone" or "sms not working" or "freezes up with any language except usa english"... I kinda use my phone so does anyone have a stock kernel with simply selinux as permissive that actually still allows the phone to work normally ?
SM-N9005 international note 3 , rooted with knox 0x0 atm.
Thanks
Click to expand...
Click to collapse
1. Best or recomended is not allowed on XDA
2. If you want to flash custom kernel it requieres custom recovery and it triggered Knox to 0x1

verny94 said:
1. Best or recomended is not allowed on XDA
2. If you want to flash custom kernel it requieres custom recovery and it triggered Knox to 0x1
Click to expand...
Click to collapse
Since i kind of dont know all the roms of there i need someone to recomend something and im aware of the risks...

Thread closed as its a recommend/best kernel thread.

[Q] Enforcing to permissive?

Could someone kindly help me switch my SElinux to permissive? I tries the SElinux mode changer but it doesnt work, I'm on 5.0 lolipop, g900a. thanks..

You would need to flash a custom kernel. KT's kernel is popular, and is permissive enabled.

metalfan78 said:
You would need to flash a custom kernel. KT's kernel is popular, and is permissive enabled.
Click to expand...
Click to collapse
Could you link it to me please? I cant find one that supports G900A

JustAnotherAndroid said:
Could you link it to me please? I cant find one that supports G900A
Click to expand...
Click to collapse
Uou cant flash any custom kernels on g900a due to locked bootloader. The new multisystem tool recently released does set it to permissive though.
Sent from my twi5ted SM-G900A using Tapatalk

I didn't know about the bootloader. I'll need to check out that tool though.

Rooted 5.1.1 Private Mode Failed

Whenever i flash custom kernel for root 5.1.1, private mode always fail. Is there a solution ?

get a custom kernel with enforcing status , i guess then it will work

Er. Aditya said:
get a custom kernel with enforcing status , i guess then it will work
Click to expand...
Click to collapse
than you so much I am using N910g can you avice any kernel

I'm using the stock kernel with NTFS support and SEenforcing and i'm also having the same problem!

I tried many kernel one of them enforcing but still private mode failed
@Er. Aditya

any-way said:
Whenever i flash custom kernel for root 5.1.1, private mode always fail. Is there a solution ?
Click to expand...
Click to collapse
Tripped KNOX counter = No Private mode forever

d4rkkn16ht said:
Tripped KNOX counter = No Private mode forever
Click to expand...
Click to collapse
But With stock rom and stock kernel it is working

any-way said:
But With stock rom and stock kernel it is working
Click to expand...
Click to collapse
Try again, I was using stock ROM & kernel (Rooted) = KNOX Counter tripped = no Private Mode

Update: I've factory reset my phone and still can't get Private Mode to work. Used to work perfectly fine prior to 5.1.1?

thecrater said:
Update: I've factory reset my phone and still can't get Private Mode to work. Used to work perfectly fine prior to 5.1.1?
Click to expand...
Click to collapse
It doesn't work anymore because KNOX Counter is tripped. You can't revert it.

sorry, double post

you could try with this: Original Samsung SE enforced kernel.
This is ONLY for N910F.

OyyoDams said:
It doesn't work anymore because KNOX Counter is tripped. You can't revert it.
Click to expand...
Click to collapse
d4rkkn16ht said:
Tripped KNOX counter = No Private mode forever
Click to expand...
Click to collapse
Bull****
You can have knox tripped, custom kernel and private mode fully functional
as you can see in the screenshot below

zamcum said:
Bull****
You can have knox tripped, custom kernel and private mode fully functional
as you can see in the screenshot below
Click to expand...
Click to collapse
I don't know if such attitude is necessary or even allowed in this forum.
I'm talking based on my experience & others.
I was using rooted stock ROM & kernel but Private mode is disabled forever right after KNOX counter tripped.
If you can enable Private Mode while using custom kernel + tripped KNOX why don't you help OP instead?

I had mine rooted and Private Mode worked on 5.0 and without Xposed. I had the original Kernel rooted by chainfire so nothing fancy! Not sure what's changed in 5.1.1

thecrater said:
I had mine rooted and Private Mode worked on 5.0 and without Xposed. I had the original Kernel rooted by chainfire so nothing fancy! Not sure what's changed in 5.1.1
Click to expand...
Click to collapse
A butt load of security was added...

Private Mode works after rooting, just try This and see the magic.

ultramag69 said:
A butt load of security was added...
Click to expand...
Click to collapse
once 5.1.1 flashed...rooted on stock rom.....i was not able to make any change by the build.prop anymore!! downgraded to 5.0.1 and "bang" everything was back...

zxaz said:
once 5.1.1 flashed...rooted on stock rom.....i was not able to make any change by the build.prop anymore!! downgraded to 5.0.1 and "bang" everything was back...
Click to expand...
Click to collapse
Lollipop 5.1.1 can't be rooted ordinary way.
You need to use custom Permissive Kernel to be able to ROOT it.
It seems that your root attempt was failed (but no error message).

i succesfully rooted...even checked with "root checker" but was not able to make any change with the build.prop....