yukawa: Add build option TARGET_SELINUX_ENFORCE
Bug: 135773554
Test: make TARGET_SELINUX_ENFORCE=true -j24
Change-Id: I0f39226a1c3980cbf84d9f7832293c0b4c3eddd3
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
diff --git a/yukawa/BoardConfig.mk b/yukawa/BoardConfig.mk
index 76b90b9..7cfa224 100644
--- a/yukawa/BoardConfig.mk
+++ b/yukawa/BoardConfig.mk
@@ -60,10 +60,13 @@
BOARD_KERNEL_CMDLINE += root=PARTUUID=99f9b7ac-5207-11e9-8507-c3c037e393f3
BOARD_KERNEL_CMDLINE += no_console_suspend console=ttyAML0,115200 earlycon
-BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive printk.devkmsg=on
+BOARD_KERNEL_CMDLINE += printk.devkmsg=on
BOARD_KERNEL_CMDLINE += skip_initramfs init=/init
BOARD_KERNEL_CMDLINE += firmware_class.path=/vendor/firmware
BOARD_KERNEL_CMDLINE += androidboot.hardware=yukawa
+ifneq ($(TARGET_SELINUX_ENFORCE), true)
+BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive
+endif
ifeq ($(TARGET_BUILTIN_EDID), true)
BOARD_KERNEL_CMDLINE += drm.edid_firmware=edid/1920x1080.bin
endif
