commit f77e60de67dbc84d06aa77adef6bdf80455ee9f5
author Stephen Smalley <sds@tycho.nsa.gov> Fri Jul 27 15:41:10 2012 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Fri Jul 27 15:41:10 2012 -0400
tree 349499235397ce3edf7fd0fd6ad419e7a3c73864
parent 0beab96891a9ee1808b113479f167148cab5c998

Revert "Allow zygote to spawn non matched apps in permissive mode"

This reverts commit 0beab96891a9ee1808b113479f167148cab5c998.

src/android.c

diff --git a/src/android.c b/src/android.c
index 0270755..6418531 100644
--- a/src/android.c
+++ b/src/android.c
@@ -491,7 +491,8 @@
 		selinux_log(SELINUX_ERROR,
 			    "%s:  No match for app with uid %d, seinfo %s, name %s\n",
 			    __FUNCTION__, uid, seinfo, pkgname);
-		goto err;
+		rc = -1;
+		goto out;
 	}
 
 	ctx_str = context_str(ctx);
@@ -523,7 +524,7 @@
 			    "%s:  Error setting context for app with uid %d, seinfo %s: %s\n",
 			    __FUNCTION__, uid, seinfo, strerror(errno));
 
-	rc = (security_getenforce() == 0) ? 0 : -1;
+	rc = -1;
 	goto out;
 oom:
 	selinux_log(SELINUX_ERROR, "%s:  Out of memory\n", __FUNCTION__);