[GUIDE][SELinux][CM13] How to Set and Keep SELinux on Permissive

[mobiusm]

DISCLAIMER:

I am not responsible to anything going wrong with your device.
You are responsible to what you are doing with your phone, not me.
If you blame me, I will laugh in your face and I'll go grab a beer.

SELinux is set to Enforcing by default on CM 13. Using an app to change the policy one is able to change it to Permissive, but on reboot, it is changed back to Enforcing. Permissive SELinux policy is need if one wants to install ViPER4Android for example.​

With a few simple steps, we are able to change it so on boot the policy will be set to Permissive:

Step 1:

SuperSU needs to be installed in order for this to work. This means replacing the stock root that comes with CM 13.

1. Download and the latest systemless SuperSU from HERE.
2. Flash the ZIP file from your recovery and reboot to system. Booting might take a while.
3. Remember to disable the built in root in developers options.

Step 2:

Use a terminal emulator or ADB to type these commands:

su
mount -o remount,rw /system
mkdir /system/su.d
echo "#!/system/bin/sh" > /system/su.d/permissive.sh
echo "setenforce 0" > /system/su.d/permissive.sh
echo "0" > /sys/fs/selinux/enforce
chmod 755 /system/su.d/permissive.sh

NOTE: each line needs to be entered separately by pressing enter after each line.

Step 3:

REBOOT

Now that you have completed the above steps, the SELinux policy should be set to Permissive and stay like that after any reboots.​

Thank you @Chainfire for the amazing SuperSU app.

 

[AntonPanos]

I modified the IRRC file a bit and i made this flashable zip that changes SELinux to permissive... You can try it, or someone with more skills or Nikita itself can check this if it's something wrong with that!
On my phone worked perfect though.. :good:

 

[Enigma.]

I installed ViPER4Android with SELinux set on Enforcing...

 

[mobiusm]

I installed ViPER4Android with SELinux set on Enforcing...

Installing is easy, but does it work for you? And are you sure you are on an Enforcing system?

 

[Enigma.]

Installing is easy, but does it work for you? And are you sure you are on an Enforcing system?

Absolutely, and I'm sure I'm on an Enforcing. I just want to ask if there is any particular reason I should set selinux on permissive, maybe some app like viper or something...?

 

[mobiusm]

Absolutely, and I'm sure I'm on an Enforcing. I just want to ask if there is any particular reason I should set selinux on permissive, maybe some app like viper or something...?

You told me you already installed viper

 

[Enigma.]

You told me you already installed viper

I did, but I'm just interested in what else I can do with permissive mode... But nvm, thanks for help anyway

 

[Paentherax]

Whenever I type this into my terminal after I type the last line (I did it correctly) its pop up with a bunch of text telling me how to use chmod755 and that I can't change something I don't own and I have to change the permissions of something? What do I do? I'm on LG G2 ls980 on CM13 and I can't flash superSU because apparently I have SU setting in my developer mode options so I can only use that or if I flash a supersu latest version my device soft bricks and I have to restore from a backup or completely restore the phone using windows software? Thanks please help

 

[mobiusm]

Whenever I type this into my terminal after I type the last line (I did it correctly) its pop up with a bunch of text telling me how to use chmod755 and that I can't change something I don't own and I have to change the permissions of something? What do I do? I'm on LG G2 ls980 on CM13 and I can't flash superSU because apparently I have SU setting in my developer mode options so I can only use that or if I flash a supersu latest version my device soft bricks and I have to restore from a backup or completely restore the phone using windows software? Thanks please help

Well as I'm sure you've read, you need to flash SuperSU to use this method.. but a quick search on Google should yield other methods of changing SELinux to Permissive...

 

[zishukkc]

i have a CM13 based custom Rom but my Selinux is disabled by default ... please tell me how i can enable it ???

Sent from my Lenovo a6000 using XDA-Developers mobile app

 

[Vagelis1608]

i have a CM13 based custom Rom but my Selinux is disabled by default ... please tell me how i can enable it ???

Is it "Permissive" or "Disabled"?
There is a huge difference.

Sent from my LG G2 Mini using XDA Labs

 

[zishukkc]

Is it "Permissive" or "Disabled"
There is a huge difference.

Sent from my LG G2 Mini using XDA Labs

as i said... it is "Disabled" ... how can i enbale it?

Sent from my Lenovo a6000 using XDA-Developers mobile app

 

[Vagelis1608]

as i said... it is "Disabled" ... how can i enbale it?

Grab the CM13 kernel sources, enable SELinux, build the kernel and flash it.
Or you could ask at the CM13 thread.

Sent from my LG G2 Mini using XDA Labs

 

[chrcol]

I modified the IRRC file a bit and i made this flashable zip that changes SELinux to permissive... You can try it, or someone with more skills or Nikita itself can check this if it's something wrong with that!
On my phone worked perfect though.. :good:

I think you should warn people this is a kernel, I just installed this thinking it was only a script to disable selinux not to overwrite my kernel.

 

[Vagelis1608]

I think you should warn people this is a kernel, I just installed this thinking it was only a script to disable selinux not to overwrite my kernel.

It doesn't overwrite the whole kernel, only cmdline

Sent from my LG G2 Mini using XDA Labs

 

[Perpatoura]

how can you undo this? On my LG G5 viper isn't working.

 

[Vagelis1608]

how can you undo this? On my LG G5 viper isn't working.

Weird. It's Enforcing SELinux that breaks Viper4Android, not Permissive.
Are you sure that SELinux broke it?

Sent from my LG G2 Mini using XDA Labs

 

[Perpatoura]

Weird. It's Enforcing SELinux that breaks Viper4Android, not Permissive.
Are you sure that SELinux broke it?

Sent from my LG G2 Mini using XDA Labs

Viper wasn't working before, so SELinux didn't broke anything. But it won't work neither, that's why I'm asking how to undo this, no reason to have permissive then.

 

[mobiusm]

Viper wasn't working before, so SELinux didn't broke anything. But it won't work neither, that's why I'm asking how to undo this, no reason to have permissive then.

Hi there.

Delete the /system/su.d/permissive.sh file and then go to /sys/fs/selinux/enforce , open the file and replace the 0 with a 1 .

 

[joseph.hsu]

Thank you AntonPanos~
i'm flash your permissive zip!it's working on viper 2.4.0.1
my phone is Note Edge 5.1.1 on Stock Rom!