am bb96809c: Ensure SELinux is not in enforcing mode.
* commit 'bb96809cdeed534f1aac6fbf96da90ab1cab9ba1':
Ensure SELinux is not in enforcing mode.
diff --git a/tests/tests/security/src/android/security/cts/KernelSettingsTest.java b/tests/tests/security/src/android/security/cts/KernelSettingsTest.java
index cc4b6a6..e660009 100644
--- a/tests/tests/security/src/android/security/cts/KernelSettingsTest.java
+++ b/tests/tests/security/src/android/security/cts/KernelSettingsTest.java
@@ -30,6 +30,17 @@
public class KernelSettingsTest extends TestCase {
/**
+ * Ensure that SELinux is not in enforcing mode.
+ */
+ public void testSELinuxEnforcing() throws IOException {
+ try {
+ assertEquals("0", getFile("/sys/fs/selinux/enforce"));
+ } catch (FileNotFoundException e) {
+ // SELinux is not compiled into the kernel. Ignore exception.
+ }
+ }
+
+ /**
* Protect against kernel based NULL pointer attacks by enforcing a
* minimum (and maximum!) value of mmap_min_addr.
*