Update: SuperSU 2.52 now available.

Chainfire has just made a come back with root for Marshmallow and updated beta of SuperSU (v2.50), which combined with modified boot images, can root your Nexus device while keeping SELinux in Enforcing mode.

We’ve discussed in length about the security concern of running SELinux in permissive mode in our post Root and Android 6.0 Marshmallow. It’s pretty serious from the security point-of-view.

Thanks to Chainfire though, you can now root your Nexus device on Marshmallow with SELinux in Enforcing mode. All you’ve to do is flash the modified boot.img file first, and then flash the SuperSU v2.52 via TWRP recovery.

Chainfire has provided modified boot.img for all Nexus devices which received the MRA58K Android 6.0 update.

Download modified boot.img

Note: The modified boot images may cause a factory reset, specifically on Nexus 6 and Nexus 9.

How to Root
  1. Setup ADB and Fastboot on your PC.
  2. Download and install TWRP recovery:
    TWRP links: Nexus 5 | Nexus 6 | Nexus 9 | Nexus Player | Nexus 7 2013 (WiFi), (LTE)
    └ How to Install TWRP recovery.
  3. Download the modified boot image file for your device from the downloads section above and extract/unzip the file to get boot.img file.
  4. Boot your Nexus device into bootloader mode and flash the boot.img file using the following command: 
    fastboot flash boot boot.img
  5. Download and flash the latest SuperSU zip beta (v2.52).

That’s all. All credits for the modified boot files and SuperSU v2.52 goes to Chainfire. Check out his original post at xda over here.

Happy Androiding!