SELinux in Android Lollipop and M

More documents

Recommendations

Info

CTS Enhancements• Test validity of all device SELinux configuration files.– Correctness and inclusion of AOSP definitions.• Test labeling of running CTS app and its files.– Runtime state of device, not just configuration.• Augmented testing of service domains.– Reverse mapping, additional services, hostside.• Test MLS attributes.20
Android & Upstream SELinux• Android SELinux refreshed from upstream for M.• Complete copy of upstream SELinux code importedunder external/selinux, used for libsepol, checkpolicy.• Work ongoing to synchronize upstream libselinux andAndroid fork.• Policy tools imported into Android for use by Androiddevelopers (audit2allow, sesearch, seinfo).– Breaks dependency on build host OS supportingAndroid SELinux policy version.21
Page 1 and 2: SELinux in Android Lollipop and MSt
Page 3 and 4: CLASSIFICATION HEADERToday's Talk
Page 5 and 6: SELinux in Android 5.0 Lollipop•
Page 7 and 8: Service-specific Protection via SEL
Page 9 and 10: Lollipop Updates●●●5.0.1 thro
Page 11 and 12: SELinux in Android M●●●●●
Page 13 and 14: SELinux and Android Multi-User●
Page 15 and 16: The Chrome for Android sandbox●
Page 17 and 18: Locking down the Binder• Binder i
Page 19: Policy Hardening• Forced init to
Page 23 and 24: Ongoing and Future Work• Enable a

SELinux in Android Lollipop and M

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?