The macros: selinux_manage_policy() selinux_manage_mmac() In te_macros. Wherever those Are used, you want to use BOARD_SEPOLICY_REPLACE to override that file with a version the does not include that ability.
AFAIK, on branch se-android only init can do this. I looked casually as well as I can on a phone and I don't see it. As far as a fix....submit a patch On Oct 1, 2013 8:51 PM, "j" <[email protected]> wrote: > Hi > > Was wondering where would be the best place to notallow any app (including > SEAndroidManager.apk) from being able to change enforcing status, as I'd > like to do this in init instead. > > There is also a small typo in content_permissions.xml on the cp_mac branch > https://bitbucket.org/seandroid/external-sepolicy/src/a8ec87d18bfef26f0f9aa1659a2d3162f9a49396/content_permissions.xml?at=cp_mac#cl-102 > > ""defualt_package" > > Thanks >
