SELinux in Android Lollipop and M

More documents

Recommendations

Info

CLASSIFICATION HEADERBackground• At LSS 2014, we looked at how SELinux had beenapplied to protect the Android TrustedComputing Base (TCB).• Starting with selective root daemon confinementin Android 4.4 KitKat.• Moving toward full confinement and TCBprotection.• Culminated in the Android 5.0 Lollipop release.CLASSIFICATION FOOTER2
CLASSIFICATION HEADERToday's Talk• Review final state of SELinux in Android 5.0Lollipop release and updates.• Look at advances in SELinux in AOSP masterexpected in the upcoming Android M release.• Discuss the state of Android & upstream SELinux.• Summarize ongoing and future work.CLASSIFICATION FOOTER3
Page 1: SELinux in Android Lollipop and MSt
Page 5 and 6: SELinux in Android 5.0 Lollipop•
Page 7 and 8: Service-specific Protection via SEL
Page 9 and 10: Lollipop Updates●●●5.0.1 thro
Page 11 and 12: SELinux in Android M●●●●●
Page 13 and 14: SELinux and Android Multi-User●
Page 15 and 16: The Chrome for Android sandbox●
Page 17 and 18: Locking down the Binder• Binder i
Page 19 and 20: Policy Hardening• Forced init to
Page 21 and 22: Android & Upstream SELinux• Andro
Page 23 and 24: Ongoing and Future Work• Enable a

SELinux in Android Lollipop and M

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?