Allow non-matched apps to launch when no match found
Allows the zygote to still spawn apps in the zygote's
context when no match is found in seapp_contexts. In
enforcing mode, apps that are not matched will not be
spawned. A "No match" message will (still) be printed
to logcat.
Change-Id: Ibe362cc8e168be7acae5162c9ff6a310233fcbe6
diff --git a/src/android.c b/src/android.c
index 9120379..d159961 100644
--- a/src/android.c
+++ b/src/android.c
@@ -525,7 +525,8 @@
selinux_log(SELINUX_ERROR,
"%s: No match for app with uid %d, seinfo %s, name %s\n",
__FUNCTION__, uid, seinfo, pkgname);
- rc = -1;
+
+ rc = (security_getenforce() == 0) ? 0 : -1;
goto out;
}