marble: add permissive SELinux mode to kernel command line

The sepolicy should obviously end up in the enforcing state, but we leave it in the permissive state for the initial boot check.
2025-06-16 16:03:30 +09:00
parent 6bc23c7966
commit cf9c975ee9
1 changed files with 1 additions and 0 deletions
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@ -93,6 +93,7 @@ BOARD_KERNEL_CMDLINE := \
 BOARD_BOOTCONFIG := \
    androidboot.hardware=qcom \
    androidboot.memcg=1 \
+    androidboot.selinux=permissive \
    androidboot.usbcontroller=a600000.dwc3

 # Kernel modules