[APP][Root][4.2+]SELinuxModeChanger v10.0 :: [24.07.2017]

Search This thread

MrBIMC

Inactive Recognized Developer
Jan 30, 2012
593
1,741
29
Chernihiv
Now opensourced under gplv3! GITHUB
Get it in f-droid F-DROID page (v10 probably won't be there until release of stable gradle 4.0 and buildtools 26)

Now available on the XDA Labs! XDA Labs page (UPD: somebody released a fork without changing packagename so you can't get it there yet -_-)
Apk from github app-release-v10.apk - (as that's the only way to distribute it until I get control of my packagename on xda labs)


There are lots of folks around who already has KitKat on their devices. But kitkat comes with new secutity enhancement, SELinux, put into "enforcing mode". Maybe This thing is good from the point of security, but it breaks some Root Apps, like my Ultimate Dynamic Navbar, so I created this app.

What does it do? This app can change modes of SELinux:
Run app, give root access, select the mode you want SELinux to be in(permissive or enforcing) and that's all. Every time you reboot your device app will execute the script to change SELinux to the mode you've selected. Simple and stupid.


know issues:
- [THEORETICALLY] doesn't work with Samsung KNOX.



XDA:DevDB Information
SELinuxModeChanger, App for the Android General

Contributors
MrBIMC

Version Information
Status: Stable
Current Stable Version: 10.0
Stable Release Date: 2017-07-24

Created 2013-11-13
Last Updated 2017-07-24
 
Last edited:

Ather

Retired Senior Moderator
May 26, 2007
4,085
1,014
33
Does not work on my N9005 stock, i open the app, grant it root access, click on passive and hust to make sure i rebooted, still when i goto settings/about i get enforcing written...
 

MrBIMC

Inactive Recognized Developer
Jan 30, 2012
593
1,741
29
Chernihiv
Does not work on my N9005 stock, i open the app, grant it root access, click on passive and hust to make sure i rebooted, still when i goto settings/about i get enforcing written...

I don't sure the string there will actually change. Better test by executing this in some terminal emulator:

Code:
su
/system/bin/getenforce
 
Last edited:

MrBIMC

Inactive Recognized Developer
Jan 30, 2012
593
1,741
29
Chernihiv
Same as the other guy. Passive to Passive. Post reboot of course.

Just flashed stock kernel. Indeed. Works only untill reboot. After that - no :( Will work on a fix now!


UPD: Switched few times into different states - it works. Works when device is booted, works after reboot(wait till notification appear - go to "about phone".). Rebooted ~10 times to check it out - everything works fine for me(galaxy nexus, android 4.4)!

Dunno, guys. Maybe that's root denial in your case or something like this?
Waiting for more replies.
 
Last edited:

Ather

Retired Senior Moderator
May 26, 2007
4,085
1,014
33

Just flashed stock kernel. Indeed. Works only untill reboot. After that - no :( Will work on a fix now!


UPD: Switched few times into different states - it works. Works when device is booted, works after reboot(wait till notification appear - go to "about phone".). Rebooted ~10 times to check it out - everything works fine for me(galaxy nexus, android 4.4)!

Dunno, guys. Maybe that's root denial in your case or something like this?
Waiting for more replies.
Could be the knox not letting it set?
 

Ranomez

Senior Member
Jun 1, 2010
1,237
305
HTC One X+
HTC Desire HD
Just a question: why not make it set the mode on boot the init.d way, cause I want to have less apps running at boot, anyway this is cool for those too lazy to use the setenforce command in terminal (and make a script)?
 

MrBIMC

Inactive Recognized Developer
Jan 30, 2012
593
1,741
29
Chernihiv
Just a question: why not make it set the mode on boot the init.d way, cause I want to have less apps running at boot, anyway this is cool for those too lazy to use the setenforce command in terminal (and make a script)?

init.d script could be added as an option, but not as #1 variant because this app is mainly targeted to stock users, and usually(always?) stock kernels don't support init.d scripts.

Also you shouldn't care about consumption of background process, cuz it doesn't start any service. After every reboot app starts only for ~1 second to execute few commands, and closes right after.
 
  • Like
Reactions: rgraville and nutpn

nutpn

Senior Member
Dec 30, 2010
479
60
ALABAMA
Wow. Do you have KNOX in your rom? What was the default state for SELinux for you(Does note 3 has "enforcing" mode on 4.3 by default)?
All my knox stuff is deleted and vzw is permissive, I checked to see if it would work and it changed to enforce then I toggled back to permissive so it worked on my note 3 thanks Im putting this one in my later folder in case anything ever happens it may work out for us.
 
  • Like
Reactions: MrBIMC

noradoor

Senior Member
Oct 15, 2011
177
43
Taichung
Thanks for this useful app.
Just tried it on my Xperia mini pro running 4.3.1,unofficial CM10.2.
But after clicking the "Enforcing" button and rebooting a couple of times,my SELinux status still shows Permissive.
Am I still missing something?:confused:
 

Roundtableprez

Senior Member
Jun 27, 2011
528
83
Confirming that it doesn't work on my Samsung galaxy note 3 even after freezing all knox stuff. Didn't expect it to work but just so other people don't try lol

Sent from my SAMSUNG-SM-N900A using xda app-developers app
 

Top Liked Posts

  • There are no posts matching your filters.
  • 526
    Now opensourced under gplv3! GITHUB
    Get it in f-droid F-DROID page (v10 probably won't be there until release of stable gradle 4.0 and buildtools 26)

    Now available on the XDA Labs! XDA Labs page (UPD: somebody released a fork without changing packagename so you can't get it there yet -_-)
    Apk from github app-release-v10.apk - (as that's the only way to distribute it until I get control of my packagename on xda labs)


    There are lots of folks around who already has KitKat on their devices. But kitkat comes with new secutity enhancement, SELinux, put into "enforcing mode". Maybe This thing is good from the point of security, but it breaks some Root Apps, like my Ultimate Dynamic Navbar, so I created this app.

    What does it do? This app can change modes of SELinux:
    Run app, give root access, select the mode you want SELinux to be in(permissive or enforcing) and that's all. Every time you reboot your device app will execute the script to change SELinux to the mode you've selected. Simple and stupid.


    know issues:
    - [THEORETICALLY] doesn't work with Samsung KNOX.



    XDA:DevDB Information
    SELinuxModeChanger, App for the Android General

    Contributors
    MrBIMC

    Version Information
    Status: Stable
    Current Stable Version: 10.0
    Stable Release Date: 2017-07-24

    Created 2013-11-13
    Last Updated 2017-07-24
    17
    is there something I can do to get rid of the Dangerous App notification ?

    on an AT&T LG G4 H810 10o

    You should activate to block the Notifaction Message for the Google Play Service/Store? App and after enable the Notification Message again.
    The Message should for a few days away

    I've been using this app for a while now on several devices including my Z2 (D6503) which had it installed for over 6 months. Then a few days ago I got this pop-up.

    Has anyone else experienced this?

    Any ideas?

    Thanks in advance!
    I want to share how I get rid of the Google Play Store warning.
    You simply remove the link to Play Store to know you have the app installed.

    The .apk is rebuilt with Lucky Patcher. The file can be downloaded below in Attached files.

    To rebuild apk file:

    1. Look at the Tab bar at the bottom of the screen
    2. Click: Rebuild & Install
    3. "select apk file"
    4. Rebuild
    5. APK without License Verification
    6. Deselect "auto mode"
    7. Select "Remove dependencies"
    8. Rebuild.

    The rebuilt file can now be found in
    /storage/emulated/0/Android/data/com.android.vending.billing.InAppBillingService.LACK/files/LuckyPatcher/Modified/"your app"/"file".apk

    You can apply this to any common .apk file. If for example your intention is to make the app a static version with no updates or Play Store warning.
    Like ES File explorer older version before it became a malware app.
    Or Swiftkey keyboard version before Microsoft took over the steering wheel.
    16
    EUREKA!!!

    The app and flashable zip is finally ready for release.

    Sometime tomorrow the new thread will be created with them both posted.

    I gotta state that this was a handful of trial and errors... The file structure is still a work in progress but, that will be worked on in the meantime.

    I'm sure that there may be someone who may run into some bumps and I'll keep working on further developments to help address those.

    I'm pretty happy with the outcome and, hopefully you all will be too.

    I'll keep you all posted!!!


    Sent on my Communicator [SCH-I535] from the Bridge of the U.S.S. Enterprise...

    ***PLZ THANK ME WITH A THUMBS UP***
    12
    ***Progress Being Made ***

    I'm close to being done with the information for the new "SELinuxModeChanger-Reboot" Thread .

    The new Thread should be up any day now.

    Also, I've just tested out the new Beta Test of the "SELinuxModeChanger-Reboot v4.0 b50" Apk and I just need to test the flashable zip file. I always test out my projects before releasing them anyway to help prevent any major issues for others.

    I'm really excited about this!

    I've developed many small things for various other projects but, this app is my first real major one that I'm happy to report that it's progressing towards the next phase of it's release.

    Though, it's been a challenge and I've hit some huge bumps along the way but, I'm back on track.

    Just keep in mind that this will launch as a beta test and will be a work in progress as i intend to do my best to provide support and will release additional Builds as improvements are made. The original Developer (MrBIMC) had made it a challenge with the app's structure.

    The installation of the file structure will remain, for the time being, until I can accomplish a more appropriate one.

    I'll be keeping you all updated on any further developments as they are made. Hopefully, the next update is to announce the launching of the new Thread and beta release.

    Thank You All for your Time and Understanding!


    Sent on my Communicator [SCH-I535] from the Bridge of the U.S.S. Enterprise...

    **IF I WAS HELPFUL IN ANY WAY THEN**
    **PLZ THANK ME WITH A THUMBS UP!**