tree cf2e2dfab673dcf553358dba4afb2698596e8f51
parent f25ea5f9c00dff32a2d04c7af3e76d0efac28a7c
author Nick Kralevich <nnk@google.com> 1456546012 -0800
committer Nick Kralevich <nnk@google.com> 1456546012 -0800

Don't allow permissive SELinux domains on user builds.

It's a CTS requirement that all SELinux domains be in
enforcing mode. Add the same assertion to the build system
when targeting user builds.

In particular, this avoids a situation where device integrity
checking is enabled on user builds, but permissive denials
are being generated, causing the device to unexpectedly reboot
into safe mode.

A developer wanting to put an SELinux domain into permissive
mode for userdebug/eng purposes can write the following
in their policy:

  userdebug_or_eng(`
    permissive foo;
  ')

Bug: 26902605
Bug: 27313768
Change-Id: Ic0971d9e96a28f2a98f9d56a547661d24fb81a21