How to turn on SELinux?

Using /e/OS Settings
1

Im using /e/ version for Samsung J5lte.
I havent found how to turn SELinux on. Is it already implemented?

1 Like
2

Sure, it is. Pls have a look under Settings/Trust. There it should be enabled

Screenshot_20191216-144536_LineageOS_Settings
Screenshot_20191216-144536_LineageOS_Settings1080×1920 132 KB

(I have disabled it manually)

3

Screenshot_20191216-144925_LineageOS_Settings
Screenshot_20191216-144925_LineageOS_Settings720×1280 54.6 KB

Disable too on my j5nlte. I asked myself the same question this morning.

4

There is an app ‘SeLinux permessiver’ with which you can change the status.

5

@Anonyme its the same in mine.
@harvey186 how have you did it? Maybe to turn it on is the same steps.

6

@harvey186 i will try it.

7

Default on my device

Screenshot_20191216-192349_LineageOS_Settings
Screenshot_20191216-192349_LineageOS_Settings324×576 28.2 KB
Screenshot_20191216-192430_LineageOS_Settings
Screenshot_20191216-192430_LineageOS_Settings324×576 32.3 KB

8

That’s the standard. I have to turn of, because I don’t have all SePolicies for my self build device. And with SeLinux enabled it won’t start.

SeLinux
SeLinux720×1280 43.9 KB

9

Here is the app I found (easy to use, looks like it’s the same Harvey just posted) :
https://f-droid.org/en/packages/com.mrbimc.selinux/

Screenshot_20191216-152704_SELinuxModeChanger
Screenshot_20191216-152704_SELinuxModeChanger720×1280 53.3 KB

Screenshot_20191216-152638_LineageOS_Settings
Screenshot_20191216-152638_LineageOS_Settings720×1280 53.4 KB

10

Just downloaded the app SELinuxModeChanger using F-droid. The app couldnt change the SELinux status because my device is not rooted. Maybe I should root my device so I can have SELinux on “Enforcing” mode. Anyone have SELinux on “Enforcing” mode in a not rooted device?

11

Yes, without root, you can’t change the status

And Yes @Anonyme that’s the app I’m using

12

I switched from enforcing to permissive since the camera (both in OpenCamera and Signal and probably everywhere) doesn’t work.

IMG_20191216_163810
IMG_20191216_163810720×1167 26.5 KB

13

Actually when I select Permissive, it shows Disabled. Which explained why it has always been “Disabled” even if the default setting is supposed to be “Permissive”.

14

If you enable SELinux the rules must be set correct otherwise you’ll get all sorts of trouble, it even may not boot!

1 Like
15

Hi everybody…
Let’s start from the start.

What is SELinux? Thanks.

1 Like
16

Security Enhanced Linux is a Linux kernel security module. Sort of a security layer on top of the file permission system.

1 Like
17

Over the years I notice that SELinux Enforcing is usually the default, especially on official ROMs with default kernels. Enforcing may be more secure but sometimes gets in the way of how I work so I’ve always switched to Permissive via some method or other.

18

I can’t find this on FP2, what version of /e/ are you using here?

19

it on android pie …

20

Settings > Security & Privacy > Trust