Note about SELinux

Android versions 5.0 (Lollipop) and above now include a security framework called SElinux. Unfortunately this framework prevents the "auto start SIF" feature from operating correctly because it prevents SIFAM from killing an already-running copy of SIF (if one exists.) If SIFAM finds that SElinux is enabled, it will automatically disable the auto start SIF" option.

There are two options for dealing with this:

  • You can manually kill any running SIF processes from the Android task switcher. You must do this every time you switch between accounts.
  • You can set SELinux to "permissive" mode, effectively disabling it. To do this, you will need a root shell on your device. Enter the command

    setenforce 0

    This will disable SELinux until you next reboot your device.

    To make this change permanent, you will need to install the Universal init.d Tool and then run the following commands as root:

    mount -o remount,rw /system
    cat > /etc/init.d/08setperm
    #!/system/bin/sh
    setenforce 0
    <press Control+D>
    mount -o remount,ro /system

    (note: see this XDA Developers thread for full instructions)

    THIS WILL LOWER THE OVERALL SECURITY OF YOUR DEVICE AND IS NOT RECOMMENDED UNLESS YOU REALLY KNOW WHAT YOU’
    RE DOING.


IMPORTANT NOTE ABOUT SAMSUNG DEVICES

On Samsung devices, SElinux CANNOT be set to “permissive” mode without a custom kernel, due to Samsung’s KNOX security layer. More information can be found in this Android StackExchange post.

© Donald Burr 2017-18. Contact Me