commit b010393fe537d855ec18a623c46e6efb6df261df
author Thiébaud Weksteen <tweek@google.com> Thu Oct 19 11:27:49 2023 +1100
committer Thiébaud Weksteen <tweek@google.com> Thu Oct 19 11:39:42 2023 +1100
tree 52bb6bcdae9d9520673765f90e999f3ce85fac57
parent 91bab464eda734089b5bd7a45c033e33475492f4

Remove write to /sys/fs/selinux/checkreqprot

This SELinux option has been deprecated in the kernel since v5.7. In
v6.4, commit a7e4676e made any write to this file a no-op.

Since v4.4, the default value of 0 is set by the kernel. Skip the
setting of this value since we only support kernel >= 4.14.

Test: presubmit
Change-Id: Ied5945532e10b156dc0d9996b2a41a99d04e750b

init/selinux.cpp

diff --git a/init/selinux.cpp b/init/selinux.cpp
index 9095b85..1f211dd 100644
--- a/init/selinux.cpp
+++ b/init/selinux.cpp
@@ -503,10 +503,6 @@
                         << ") failed";
         }
     }
-
-    if (auto result = WriteFile("/sys/fs/selinux/checkreqprot", "0"); !result.ok()) {
-        LOG(FATAL) << "Unable to write to /sys/fs/selinux/checkreqprot: " << result.error();
-    }
 }
 
 constexpr size_t kKlogMessageSize = 1024;