[Module][10.14.2018][Discontinued] Magisk SELinux Manager

[Jman420]

This project has been discontinued. The final state of the module can be found at the GitHub Repo https://github.com/Jman420/magisk_selinux_manager.

Magisk SELinux Manager
A Magisk Module dedicated to the manipulation and analysis of SELinux.

Features
* Select SELinux mode to set at startup

Usage
The SELinux mode to set at startup must be specified during module installation. The SELinux mode can be selected either by specifying the mode (permissive or enforcing) in the install zip's filename (ie. magisk_selinux_manager_v1.0_permissive.zip) or using your phone's volume keys when prompted.

Disclaimer & Recommendations regarding Permissive Mode
This module should be used to enable SELinux Permissive Mode only as a last resort only if appropriate SELinux Permissions can not be generated and injected into the SELinux Policy using selinux-inject, supolicy or magiskpolicy. Putting your device into Permissive Mode will essentially disable all of the operating system level security built into Android and allow any app in any context to do whatever it wants. Actions requiring root access will still trigger your SU Manager App, but all apps have elevated privileges due to permissive mode and may be able to take malicious actions on your device without needing root access. If you find that this module fixes issues you are experiencing with an app I recommend contacting the app developer and trying to work with them to isolate the necessary SELinux Permissions and have them injected into the SELinux Policy at startup.
Here is a discussion of some of concerns to consider when running your device in Permissive Mode : https://forum.xda-developers.com/gen...risks-t3607295

GitHub Repo : https://github.com/Jman420/magisk_selinux_manager

Requirements
* SELinux enabled kernel
* Magisk v15.3+

Change Log
* v1.0.5 - Update Unity Installer Files to v1.5.4
* v1.0.4 - Update Unity Installer Files to v1.5.3
* v1.0.3 - Update Unity Installer Files to v1.5.2
* v1.0.2 - Update Unity Installer Files to v1.4.1
* v1.0.1 - Update Unity Installer Files to v1.4
* v1.0.0 - Initial Release

Special thanks!
* topjohnwu - For providing Magisk and the interesting insights that its source code gave into SELinux
* ahrion & zackptg5 - For providing the Unity Installer and Vol Key Input code
* Everyone who supported the old magisk_permissive_script module and giving me a bit of motivation to keep working on SELinux stuff

Release Distribution Plans
All Releases are available on the Magisk Module Repo. Releases will not be distributed here.

 

[dredq]

Magisk SELinux Manager
A Magisk Module dedicated to the manipulation and analysis of SELinux.

Features
* Select SELinux mode to set at startup

Usage
The SELinux mode to set at startup must be specified during module installation. The SELinux mode can be selected either by specifying the mode (permissive or enforcing) in the install zip's filename (ie. magisk_selinux_manager_v1.0_permissive.zip) or using your phone's volume keys when prompted.

Disclaimer & Recommendations regarding Permissive Mode
This module should be used to enable SELinux Permissive Mode only as a last resort only if appropriate SELinux Permissions can not be generated and injected into the SELinux Policy using selinux-inject, supolicy or magiskpolicy. Putting your device into Permissive Mode will essentially disable all of the operating system level security built into Android and allow any app in any context to do whatever it wants. Actions requiring root access will still trigger your SU Manager App, but all apps have elevated privileges due to permissive mode and may be able to take malicious actions on your device without needing root access. If you find that this module fixes issues you are experiencing with an app I recommend contacting the app developer and trying to work with them to isolate the necessary SELinux Permissions and have them injected into the SELinux Policy at startup.
Here is a discussion of some of concerns to consider when running your device in Permissive Mode : https://forum.xda-developers.com/gen...risks-t3607295

GitHub Repo : https://github.com/Jman420/magisk_selinux_manager

Requirements
* SELinux enabled kernel
* Magisk v15.3+

Change Log
* v1.0 - Initial Release

Special thanks!
* topjohnwu - For providing Magisk and the interesting insights that its source code gave into SELinux
* ahrion & zackptg5 - For providing the Unity Installer and Vol Key Input code
* Everyone who supported the old magisk_permissive_script module and giving me a bit of motivation to keep working on SELinux stuff

Release Distribution Plans
I have submitted a request to include this module in the Magisk Repo List. Once that request has been accepted the Magisk Repo List will be the ONLY source for up to date releases of the module. Until that time I will provide download links through this posting.

What are the differences with this zip and the old one?

 

[Didgeridoohan]

What are the differences with this zip and the old one?

When installing the module you can choose if SELinux should be set to enforcing or permissive (it's written right there in the OP).

 

[dredq]

When installing the module you can choose if SELinux should be set to enforcing or permissive (it's written right there in the OP).

Sorry. I saw that. I was wondering if there where any other differences.

 

[Jman420]

Sorry. I saw that. I was wondering if there where any other differences.

Nope, if there were I'd have mentioned them.

 

[samplebird]

I installed the module and set it to permissive, but when I restarted my phone now it is stuck in the boot animation. I tried uninstalling using the magisk uninstaller, but still the problem remains. Is there a way to undo the changes from Recovery? Thank you! Running lineage 14.

 

[Jman420]

I installed the module and set it to permissive, but when I restarted my phone now it is stuck in the boot animation. I tried uninstalling using the magisk uninstaller, but still the problem remains. Is there a way to undo the changes from Recovery? Thank you! Running lineage 14.

You can flash the zip again to uninstall, thanks to Unity Installer... but I don't expect that to do anything different than the Magisk Uninstall. You may need to debug your Magisk installation with Magisk Manager for Recovery (https://forum.xda-developers.com/apps/magisk/module-tool-magisk-manager-recovery-mode-t3693165).

 

[Didgeridoohan]

I installed the module and set it to permissive, but when I restarted my phone now it is stuck in the boot animation. I tried uninstalling using the magisk uninstaller, but still the problem remains. Is there a way to undo the changes from Recovery? Thank you! Running lineage 14.

Did you try installing the module again and choosing enforcing instead of permissive?

 

[Jman420]

Update v1.0.1 has been released on Magisk Repo. No real functionality updates, just updated Unity Installer to latest (v1.4). See change logs for Unity Installer here : https://forum.xda-developers.com/android/software/module-audio-modification-library-t3579612

I've also migrated to using Semantic Versioning for this project (although it's probably not needed). See details here : https://semver.org/

 

[PixelChris95]

The module doesn't seem to be part of the magisk repo yet. But v1.0.0 us working fine on my side anyway. :good:

 

[Didgeridoohan]

The module doesn't seem to be part of the magisk repo yet. But v1.0.0 us working fine on my side anyway. :good:

Clear the repo cache (Manager settings) and reload the Downloads list (pull down).

 

[PixelChris95]

Clear the repo cache (Manager settings) and reload the Downloads list (pull down).

That did the trick. Thx!

 

[mxn2000]

Not working on Oreo b390 Huawei P10. SeLinunx remains on enforce:
watch this issue:
https://forum.xda-developers.com/p10/help/magisk-16-0-p10-orea-t3765921

 

[Didgeridoohan]

Not working on Oreo b390 Huawei P10. SeLinunx remains on enforce:
watch this issue:
https://forum.xda-developers.com/p10/help/magisk-16-0-p10-orea-t3765921

"Preserve Forced Encryption" doesn't have anything to do with SELinux. That's /data encryption...

Try running:

setenforce permissive

And if that still doesn't work, run this and use whatever options are available, or return with the result:

setenforce --help

 

[Intelli69]

Every time I setenforce 1 it always says Permissive after .. Even after reboot or in the Twrp terminal .. Anytime I type grtenforce it always says Permissive. What do I type in terminal emulator to access this mod? Am I missing something here?? Lol sorry - still learning.

 

[Didgeridoohan]

Every time I setenforce 1 it always says Permissive after .. Even after reboot or in the Twrp terminal .. Anytime I type grtenforce it always says Permissive. What do I type in terminal emulator to access this mod? Am I missing something here?? Lol sorry - still learning.

You don't have to do anything after installing the module. At installation your choose enforcing or permissive, and then that's what the module will set at each boot.

 

[Intelli69]

OK I thought that was it! Thanks!

 

[Shafwan7]

so should use this one or old version?
or it is still the same function?

 

[lawong]

does this work on samsung?

 

[Skull97]

does this work on samsung?

Yup, as long as you have magisk.