eOS pie OFFICIAL - encryption not working

[steadfasterX]

A full review of encryption is needed:

• does not even start when in enforcing
• does not boot when enabled encryption in permissive

Log for the first one:

04-12 18:54:39.890 10471 10471 I auditd  : type=1400 audit(0.0:13): avc: denied { read } for comm="Binder:404_2" name="mmcblk0p55" dev="tmpfs" ino=5457 scontext=u:r:vold:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
04-12 18:54:39.890 10471 10471 W Binder:404_2: type=1400 audit(0.0:13): avc: denied { read } for name="mmcblk0p55" dev="tmpfs" ino=5457 scontext=u:r:vold:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
04-12 18:54:40.994 10471 10471 W Binder:404_2: type=1400 audit(0.0:14): avc: denied { read } for name="mmcblk0p55" dev="tmpfs" ino=5457 scontext=u:r:vold:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
04-12 18:54:40.994 10471 10471 I auditd  : type=1400 audit(0.0:14): avc: denied { read } for comm="Binder:404_2" name="mmcblk0p55" dev="tmpfs" ino=5457 scontext=u:r:vold:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0

For boot:

(follows)

The main problem is likely that official e does not use the right flags for some selinux configs (likely never allows)