Don't enforce sepolicy
With selinux enabled it's close to impossible to allow choosing the
setupwizard mode at boot time. Having it always disabled or enabled
both break tests.
Bug: 129689270
Test: local
Change-Id: I3d0adc3704deb09bd8e82fad6173f2cd65315364
diff --git a/host/commands/launch/flags.cc b/host/commands/launch/flags.cc
index 1387f30..6cadcf0 100644
--- a/host/commands/launch/flags.cc
+++ b/host/commands/launch/flags.cc
@@ -65,7 +65,7 @@
"The codename of the device's hardware, one of {cutf_ivsh, cutf_cvm}");
DEFINE_string(guest_security, "selinux",
"The security module to use in the guest");
-DEFINE_bool(guest_enforce_security, true,
+DEFINE_bool(guest_enforce_security, false,
"Whether to run in enforcing mode (non permissive). Ignored if "
"-guest_security is empty.");
DEFINE_bool(guest_audit_security, true,
