commit 68d7ebb8c069bbecd289a735a62d886e615ca050
author Greg Hartman <ghartman@google.com> Tue Mar 19 21:23:31 2019 -0700
committer Greg Hartman <ghartman@google.com> Tue Mar 19 21:34:07 2019 -0700
tree a97475042dd357d01b193c9003abf50b01b5fe9c
parent ba8f8e99210af0df246f66deaafcb869a110f222

Revert "Switch selinux enforcement on"

This reverts commit e1c03210df67176507f3c986fa92a1eb4d4b3870.

BUG: 128948155
BUG: 28053261
Test: bin/launch_cvd -guest_enforce_security=false

host/commands/launch/flags.cc

diff --git a/host/commands/launch/flags.cc b/host/commands/launch/flags.cc
index 2941a2c..49d34b3 100644
--- a/host/commands/launch/flags.cc
+++ b/host/commands/launch/flags.cc
@@ -64,7 +64,7 @@
     "The codename of the device's hardware, one of {cutf_ivsh, cutf_cvm}");
 DEFINE_string(guest_security, "selinux",
               "The security module to use in the guest");
-DEFINE_bool(guest_enforce_security, true,
+DEFINE_bool(guest_enforce_security, false,
             "Whether to run in enforcing mode (non permissive). Ignored if "
             "-guest_security is empty.");
 DEFINE_bool(guest_audit_security, true,