August 20th, 2014
54 Comments
54 Comments
Ok, S3 Mini users, so we gave you opportunity to test SELinux in last CM, Carbon and AOSPA/ParanoidAndroid releases.
Now it’s time to decide: we keep SELinux enabled or we disable it again?
Remember: SELinux uses much resources, what decrease battery life and we don’t have enough sources to make 100% proper policies!
Please, vote here:
Loading ...
54 Responses
Leave a Reply
Recent Posts
Recent Comments
Archives
- August 2021
- January 2018
- December 2017
- November 2017
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- November 2016
- September 2016
- August 2016
- July 2016
- June 2016
- May 2016
- April 2016
- March 2016
- February 2016
- January 2016
- December 2015
- November 2015
- October 2015
- September 2015
- August 2015
- July 2015
- June 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- October 2014
- September 2014
- August 2014
- July 2014
- June 2014
- May 2014
- April 2014
- March 2014
- February 2014
- January 2014
- December 2013
- November 2013
- October 2013
- September 2013
- August 2013
- July 2013
- June 2013
- May 2013
- April 2013
- March 2013
- February 2013
- January 2013
- December 2012
- November 2012
- September 2012
- August 2012
- July 2012
- June 2012
Disabling it makes no sense. As an alternative, provide a way to put it in permissive mode, maybe from TWRP.
What about two builds per release, with and without SELinux enabled?
Are you serious?
If I understand the enabling/disabling SELinux correctly, it could have been done by setting some “global” Makefile variable. Of course two builds = double build time, +- double space occupied on disk, double trouble (something will not work on SELinux version, while on nonSE it will be all right),…
BTW how about NFC for I8190N version? There is something in GIT repository, but nothing in release…
perhaps you can put an option into aroma installer so that we can choose to set selinux permissve or enforcing
Pls disable SELinux! Voting doesn’t work for me!
Well, optionality would be the best solution of course, if it’S possible in any easy way.
i cant believe you asked them to make 2 builds, they must be robots with no life of there own. it needs disabled..
+1. No need for extra man hours and build server costs…
I am not asking anyone, I’ve pointed out to something that could be just one of possible solutions. Anyway, I prefer longer battery life, so I voted for disable. 🙂
IMHO disabling/enabling could be controlled from one place by some configuration variable, so theoretically it’s only matter of time, disk space,…but it also means 2x testing,…I think that not enough time will be the main problem here.
are you mad, you asked for 2 builds, you try 1 build see how easy it is. you read maclaws response are you serious in other words stop being stupid.
like i said yesterday but it didnt get printed, you did ask, and like maclaw said are you joking. its hard enough for them to get bugs out of 1 build never mind 2. we dont need selinux enabled as its a battery drainer.
Disable it my dear I don’t think anyone use it already
just to say I have security settings but none feel any changes
make anything to make battery life have more time to using
i think there was an app that allows you to disable it
http://forum.xda-developers.com/showthread.php?t=2524485
so keep it enabled and if someone wanted to disable it install the program
I think the same that this user.
You (developer ai ai ai) could keep it enabled in the future releases and work on it on every release too, to make better than before… and we can decide by our own decision if we want it enabled or disabled on our devices using these APK or something like these.
Or why not?, add an option (visual and touchable) on every of this ROMs that could enable and disable it by our own decision. This will be possible to add on the next releases?
Or maybe (developer), if there is any way to modify the state of SELinux by changing any file (easy way or not)…
You could tell as about that.
So I present you these 3 options if you decide to keep enabled de SELinux:
– Using by our own decision and APP that changes the state of SELinux
or
– Add a new feature inside every ROM to enable/disable SELinux
or
– Tell as about any possible way to enable/disable SELinux
Remember a few months back the articles about hacking the phone through the modem? SELinux is designed to prevent attacks / spying of this sort. It will restrict modem processes to access only the resources labeled for modem use. Without SELinux a compromise of the modem subsystem can lead to completely taking over the whole phone.
Let me add, the impact on battery life is overstated. I’ve noticed no significant increase in battery drain with the Aug 14 image over prior images.
Well, I couldn’t care less.It’s this kind of misinformation and für that drove away from novafusion. It is simply not true that selinux uses that much resources, it only shows that you do not und er stand its workings.I do have a device on aosp with selinux and two days worth of battery.
At least provide us a way to choose to have SElinux enabled if we want. Please.
Could there be an option during install?
i prefer to keep it on. more security is everytime good. (you don’t say “it was made by NSA, so they can spy us. that would be funny. the don’t need our personal datas i think:))
That way of thinking is what the NSA wants to make you believe
The question is biased!
Could you please briefly explain what are the “bad” consequences of disabling SElinux?
Thanks!
Please turn off by default. This is a waste of resources for both your team and our phones.
I’m not convinced that SElinux will bring any advantage for this rom, and maintaining the profiles is a total PITA (I know; I run production servers with it enabled), I’d much rather you guys spent time on rom improvements instead 😉
I’ve voted ‘disable’, I see the point of having it enabled on stock phones, consumer devices, but I think the crowd using the NovaFusion roms etc are not really the target ‘audience’ for this anyway.
Give me a way to turn it on if I want it. Don’t spend time tinkering with the policy. Just leave the code in the image and enable me to turn it on.
You could add an option to the ROM enable / disable SELinux
If it were that easy to turn on or off, there wasn’t need for a poll? 😉
the only thing ive seen is an app to change from enforcing to permissive, permissive is as close as youll get to it being off.
Yes and it would still be an extra weight on the system.
agreed
Thanks for giving us the opportunity to choose. I elegi disabled. Android is an attack on privacy and SELinux is not going to change anything. Applications have access to all our data, calls, messages, sd memory, recorded what we write, etc. Prefer more durability of the battery and you will spend more to improve the rom. Sorry for my bad English
I chose to disable
SELinux is totally f*cking useless
I’ve voted ‘disable
I would say… Shut it off again 🙂
P.s. cannot vote in the poll… No matter.
Now it worked. Voted OFF
You better of kicking SElinux sorry ass, less trouble the better.
Thanks Nova Team!
Obviously security is at best a secondary concern to the majority here. Sad but true.
May I ask you what has to do SELinux with battery? Anyways I understand that configuring policies and having root enabled is pointless.
It takes a few extra cpu cycles to get permission to use certain resources. It’s such a minor amount that I can’t see any difference between battery usage of the 05/20 image and these recent ones.
Simply thought, more work for system = more CPU time and therefore more battery drain?
Please disable it.there is not much difference seen.By the way please increase the AOSPA updates.
don’t worry
i think mac has seen that aospa becomes more and more famous
i think that is not necessary right now. and maybe have more issues that we dont know since this isn’t officially supported. i prefer to disable it and give more another updates 😀
Hell yeah, Disable that shit
SELinux user option as DISABLE or ENABLE.
Idiots(to many users), what if they were spying on you?? You think you are important? Well, you aren’t so stop spamming and enjoy the rom.
Kiss my ass stupid…
What they find out that I’m an secret agent… LOL …. I would disable SEL, I don’t let others to touch my smartphone, security isn’t that important by now lol 🙂
perhaps he is kidding you :DDD
is it a option to add the choice in the install?
(ps: sorry if my english is bad becaus i’m dutch and 16 but not a noob in flashing)
It’s better to disable. Only 5% of people really knows what SELinux does. Besides, people will complain a lot because of battery later
I think that is a good idea to keep it enabled as in Cyanogenmod official because it grant’s more safety.