a7y18lte-ubports/android_kernel_samsung_universal7885
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security: defex: set Defex to Permissive status

Browse Source 
As discovered by @topjohnwu, new Samsung Processes protection blocks cpboot-daemon to run when Magisk is installed, preventing baseband to work. Set Defex to Permissive to avoid this and future issues

Signed-off-by: BlackMesa123 <brother12@hotmail.it>
This commit is contained in:
BlackMesa123 2018-08-13 12:46:49 +02:00
parent 3e6bfee9aa
commit 5d05913b15
1 changed files with 3 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
security/defex_lsm/Makefile
View File

@ -52,16 +52,6 @@ ifeq ($(CACHES_ENABLE), true)
EXTRA_CFLAGS += -DDEFEX_CACHES_ENABLE
endif
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
obj-y += defex_debug.o
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_DEBUG_ENABLE
EXTRA_CFLAGS += -DDEFEX_SYSFS_ENABLE
endif
ifneq ($(CONFIG_SAMSUNG_PRODUCT_SHIP), y)
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
ifneq ($(TARGET_BUILD_VARIANT), eng)
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_PED
endif
endif
# Set Defex to Permissive
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_SP
EXTRA_CFLAGS += -DDEFEX_PERMISSIVE_PED