SELinux permissive kernel - is it a security risk?
4
votes
1
answer
5420
views
As in title. I am talking of Kernel, not ROM (plenty of questions dealing with ROM on this site).
I have a OnePlus 7 running stock Android 10 and prefer a custom kernel. Of late, OnePlus hasn't released source for kernel and this has played havoc with all custom kernels in OnePlus 7 and other variants. So, I want to flash a [kernel](https://forum.xda-developers.com/showpost.php?p=81300967&postcount=605)
that is independent of the changes One Plus makes.
Only problem is that it is **SELinux permissive** and therefore I want to understand the security risks before flashing it.
Edit:
As requested in comments (deleted) :
-# zcat /proc/config.gz | grep CONFIG_SECURITY_SELINUX
CONFIG_SECURITY_SELINUX=y
# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set
# CONFIG_SECURITY_SELINUX_DISABLE is not set
CONFIG_SECURITY_SELINUX_DEVELOP=y
CONFIG_SECURITY_SELINUX_AVC_STATS=y
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
- # zcat /proc/config.gz |grep CONFIG_DEFAULT_SECURITY_SELINUX
CONFIG_DEFAULT_SECURITY_SELINUX=y
-# mount | grep selinuxfs
selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime)
Asked by beeshyams
(41525 rep)
Dec 29, 2019, 09:00 AM
Last activity: Dec 31, 2019, 12:52 PM
Last activity: Dec 31, 2019, 12:52 PM