[Galaxy Tab 4 General] :
notes ENFORCE, DISABLE, permissive, AVC_STRICT

# grep-line CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/ss/services.c[/COLOR]:738:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/ss/services.c:1361:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/ss/services.c:1630:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/ss/status.c[/COLOR]:61:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/selinuxfs.c[/COLOR]:173:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/selinuxfs.c:1945:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/netnode.c[/COLOR]:315:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/avc.c[/COLOR]:772:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/hooks.c[/COLOR]:111:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/hooks.c:128:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/hooks.c:4664:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/hooks.c:5912:#ifdef CONFIG_ALWAYS_ENFORCE
security/selinux/hooks.c:5991:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/exports.c[/COLOR]:21:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/netif.c[/COLOR]:287:#ifdef CONFIG_ALWAYS_ENFORCE
security/[COLOR="Red"]selinux/netport.c[/COLOR]:251:#ifdef CONFIG_ALWAYS_ENFORCE

# grep-line CONFIG_SECURITY_SELINUX_DISABLE
security/[COLOR="Red"]selinux/selinuxfs.c[/COLOR]:289:#ifdef CONFIG_SECURITY_SELINUX_DISABLE
security/selinux/selinuxfs.c:1973:#ifdef CONFIG_SECURITY_SELINUX_DISABLE
security/[COLOR="Red"]selinux/hooks.c[/COLOR]:6015:#ifdef CONFIG_SECURITY_SELINUX_DISABLE
security/selinux/hooks.c:6029:#ifdef CONFIG_SECURITY_SELINUX_DISABLE
security/selinux/hooks.c:6035:#ifdef CONFIG_SECURITY_SELINUX_DISABLE

grep-line "permissive"
mm/vmalloc.c:446: * Invalidate cache if we have more permissive parameters.
mm/vmalloc.c:462: /* record if we encounter less permissive parameters */
kernel/module.c:3320: /* Change permissive bits for core section*/
kernel/module.c:3323: /* Change permissive bits for core section and making Code read only, Data Non Executable*/
kernel/module.c:3337: /* Change permissive bits for init section*/
kernel/module.c:3340:/* Change permissive bits for init section and making Code read only,Data Non Executable*/
Documentation/kernel-parameters.txt:812: 0 -- permissive (log only, no denials).
drivers/i2c/i2c-core.c:351:/* This is a permissive address validity check, I2C address map constraints
include/linux/audit.h:114:#define AUDIT_MAC_STATUS 1404 /* Changed enforcing,permissive,off */
security/selinux/ss/services.c:935: /* permissive domain? */
security/selinux/ss/services.c:981: /* permissive domain? */
security/selinux/ss/status.c:85: * It updates status of the current enforcing/permissive mode.
security/selinux/Kconfig:63: kernel will start in permissive mode (log everything, deny nothing)
security/selinux/Kconfig:66: permissive mode (if permitted by the policy) via /selinux/enforce.
security/selinux/hooks.c:5918: printk(KERN_DEBUG "SELinux: Starting in permissive mode\n");
[COLOR="Red"]security/selinux/include/avc.h:86:#define AVC_STRICT 1 /* Ignore permissive mode.[/COLOR] */

grep-line "AVC_STRICT"
security/selinux/ss/services.c:2232: PROCESS__TRANSITION, AVC_STRICT,
security/selinux/avc.c:770: if (flags & AVC_STRICT)
security/selinux/avc.c:791: * @flags: AVC_STRICT or 0
security/selinux/include/avc.h:86:#define AVC_STRICT 1 /* Ignore permissive mode. */