configs: go enforcing

samsungexynos7870 · Aug 19, 2020 · 928c2bd · 928c2bd
1 parent 29223d2
commit 928c2bd
Show file tree

Hide file tree

Showing 8 changed files with 24 additions and 24 deletions.
diff --git a/arch/arm64/configs/exynos7870-a3y17lte_defconfig b/arch/arm64/configs/exynos7870-a3y17lte_defconfig
@@ -453,7 +453,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4772,8 +4772,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-a6lte_defconfig b/arch/arm64/configs/exynos7870-a6lte_defconfig
@@ -455,7 +455,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4699,8 +4699,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-j5y17lte_defconfig b/arch/arm64/configs/exynos7870-j5y17lte_defconfig
@@ -455,7 +455,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4706,8 +4706,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-j6lte_defconfig b/arch/arm64/configs/exynos7870-j6lte_defconfig
@@ -455,7 +455,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4698,8 +4698,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-j7velte_defconfig b/arch/arm64/configs/exynos7870-j7velte_defconfig
@@ -454,7 +454,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4709,8 +4709,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-j7xelte_defconfig b/arch/arm64/configs/exynos7870-j7xelte_defconfig
@@ -454,7 +454,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4689,8 +4689,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-j7y17lte_defconfig b/arch/arm64/configs/exynos7870-j7y17lte_defconfig
@@ -455,7 +455,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4708,8 +4708,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

diff --git a/arch/arm64/configs/exynos7870-on7xelte_defconfig b/arch/arm64/configs/exynos7870-on7xelte_defconfig
@@ -455,7 +455,7 @@ CONFIG_ARM64_UAO=y
 #
 # Boot options
 #
-CONFIG_CMDLINE="androidboot.selinux=permissive"
+# CONFIG_CMDLINE="androidboot.selinux=permissive"
 # CONFIG_CMDLINE_FROM_BOOTLOADER is not set
 CONFIG_CMDLINE_EXTEND=y
 # CONFIG_CMDLINE_FORCE is not set
@@ -4710,8 +4710,8 @@ CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
 # CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 # CONFIG_SECURITY_SELINUX_FAKE_ENFORCE is not set
-# CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE is not set
-CONFIG_SECURITY_SELINUX_NEVER_ENFORCE=y
+CONFIG_SECURITY_SELINUX_ALWAYS_ENFORCE=y
+# CONFIG_SECURITY_SELINUX_NEVER_ENFORCE is not set
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set