Hi
I got J510F (2016) stock rom (andrroid 6) , stock kernel is rooted already but I can't get SELinux permissive its always stay in enforcement and can't change Any idea ???
thanks for help
Try using selinuxmodechanger.apk install it as system app
Kcjbj
Firstly u have to install busy box in system/bin then install selinux mode changer apk
Related
Hi , I just updated to latest stock firmware on Lollipop , And rooted , Before that supersu showed me that there is knox in my phone and if I want to remove it or not .
But this time (v 2.40) Supersu isn't showing meany warning on knox . And I don't know yet how to disable it .
And I am trying to Change the Selinux Policy to Permissive PERMANENTLY .
So I installed the "Selinux Mode changer" and set it to permissive .
But after rebooting I did got the notification that selinux mode did the job .
But getenforce command always returns enforcing .
And in About Device so .
So , does anyone knows what the problem really is or what is the program that's causing this ?
And I hope you guys have a solution for this .
Regards,
Shahriar
Hi
Xposed is here. if you are wondering it does not work for you its because the SELinux status is set as Enforcing which doesnt allow xposed framework to modify at system level. though some modules are not compatible yet
Bonus : Also if you are using Viper4Android it wont work unless the SELinux is Permissive
there is a workaround for this. 3rd being the easiest and permanent fix
1. Terminal method
Code:
Su
Setenforce permissive
soft reboot to make xposed to work
OR
2. Using SELinux Mode Changer APP
Use this app SELinux Mode Changer
change it to Permissive and soft reboot to make xposed to work
Else
3. With a modified Kernel(CM12 only) easiest method
Here is the modified Kernel which is set to permissive by default.
it is a boot.img not flashable.zip
How to flash
1. Flash this using TWRP(TWRP can flash img files now ) or apps like RASHR can be used to flash boot.img
for more info check this https://source.android.com/devices/tech/security/selinux/validate.html#switching_to_permissive
Tested with BlissPop 13th release works as intended
i have used BlissPop kernel. it is as good as CM12 Kernel
Better to have a backup(Not mandatory its upto you)
All credits to original developers
reversegear said:
Hi
Xposed is here. if you are wondering it does not work for you its because the SELinux status is set as Enforcing which doesnt allow xposed framework to modify at system level. though some modules are not compatible yet
Bonus : Also if you are using Viper4Android it wont work unless the SELinux is Permissive
there is a workaround for this. 3rd being the easiest and permanent fix
1. Terminal method
Code:
Su
Setenforce permissive
soft reboot to make xposed to work
OR
2. Using SELinux Mode Changer APP
Use this app SELinux Mode Changer
change it to Permissive and soft reboot to make xposed to work
Else
3. With a modified Kernel(CM12 only) easiest method
Here is the modified Kernel which is set to permissive by default.
it is a boot.img not flashable.zip
How to flash
1. Flash this using TWRP(TWRP can flash img files now ) or apps like RASHR can be used to flash boot.img
for more info check this https://source.android.com/devices/tech/security/selinux/validate.html#switching_to_permissive
Tested with BlissPop 13th release works as intended
i have used BlissPop kernel. it is as good as CM12 Kernel
Better to have a backup(Not mandatory its upto you)
All credits to original developers
Click to expand...
Click to collapse
Hi,
great post, thanks!
I have two questions:
- Can you provide more information about this kernel please?. Is stock cm12 kernel, only with SeLinux changed?
I don´t use cm12 because SeLinux is set to enforcing and have problems restoring nandroid backup with TWRP (no problems with philz recovery).
- I don´t have tested, but i think that if you make init.d script that change SeLinux, you would´t have to make soft reboot.
Regards.
SergioSanchezR said:
Hi,
great post, thanks!
I have two questions:
- Can you provide more information about this kernel please?. Is stock cm12 kernel, only with SeLinux changed?
I don´t use cm12 because SeLinux is set to enforcing and have problems restoring nandroid backup with TWRP (no problems with philz recovery).
- I don´t have tested, but i think that if you make init.d script that change SeLinux, you would´t have to make soft reboot.
Regards.
Click to expand...
Click to collapse
1. as i said kernel i used is from BLISSPOP rom from 13th experimental build. i dont think Bliss Team made any changes to the kernel. i guess you can flash custom kernel like optimus / Attacked on top of the modded kernel because both provide only Zimage. so that SELinux status is retained to Permissive
2. i Tried init.d script unfortunately it wont work on CM based rom so i thought of modifying in boot.img itself
Hope this helps
Cool !!
wow!, the terminal method is vv easy method. Works perfectly!!
SELinux-Status: Moderat
Hi!
I used the Terminal method.
However, the SELinux-Status is now: Moderat (see screenshot).
Can you please instruct?
THX
So I'm running -
Unlocked Bootloader
Stock Rooted Rom (w/ Chainfire modified boot image)
Stock Kernel
TWRP
Xposed
Is SELinux in Enforcing Mode or Permissive Mode on my phone? How do I find out? And if I'm in Permissive, is there a way for me to change it to Enforcing?
Thanks!
byproxy said:
So I'm running -
Unlocked Bootloader
Stock Rooted Rom (w/ Chainfire modified boot image)
Stock Kernel
TWRP
Xposed
Is SELinux in Enforcing Mode or Permissive Mode on my phone? How do I find out? And if I'm in Permissive, is there a way for me to change it to Enforcing?
Thanks!
Click to expand...
Click to collapse
You can check in Settings --> About Phone.
SELinux is in Enforcing mode by default, so unless you changed it, it will still be in Enforcing.
Hello,
I have a g9287 dual sim. I was wondering if I can use a kernel from the other devices such as g928c/f/g/i etc. Can someone please help? My necessity is to switch to permissive mode from enforcing mode in SELINUX module. I wasnt able to do this with any other tool or by any other method. I used the g928f(i guess) audax kernel and it was permissive. Can someone please help?
try to flash this file,if not try flash the root file
Hi, thanks for the time. I tried flashing it and it does make it permissive. I'm on android 6 now. If I switch to nougat will I still be able to use this and flash it to make it permissive?
Hi,
I searched tons of info about SeLinux state change in google and other sites(XDA too), but did not resolve problem,when i try to set permissive - su setenforce 0 - after type getenforce it still shows "enforcing" , I think my kernel do not have ability to change selinux state or turn off it(I prefer), I think I need to install custom kernel, can anyone tell me how to install permissive kernel and which kernel? Will I need to reinstall entire ROM?
S7 edge SM-G935FD, exynos, Magisk 20.3, Oreo stock rom 8.0