SELinux in Android Lollipop and M

More documents

Recommendations

Info

Android 5.0 CTS SELinux Tests●●●●●●●Enforcing for all.Policy satisfies neverallow rules.Core system services running in their domains.Only init in the init domain.Only kernel threads in the kernel domain.Nothing running in recovery or su domains.No policy booleans.8
Lollipop Updates●●●5.0.1 through 5.1.1Carry forward all of the SELinux protections.5.1 CTS has improved neverallow checker.– Check all domains, not just AOSP domains.– Back-ported from AOSP master.9
Page 1 and 2: SELinux in Android Lollipop and MSt
Page 3 and 4: CLASSIFICATION HEADERToday's Talk
Page 5 and 6: SELinux in Android 5.0 Lollipop•
Page 7: Service-specific Protection via SEL
Page 11 and 12: SELinux in Android M●●●●●
Page 13 and 14: SELinux and Android Multi-User●
Page 15 and 16: The Chrome for Android sandbox●
Page 17 and 18: Locking down the Binder• Binder i
Page 19 and 20: Policy Hardening• Forced init to
Page 21 and 22: Android & Upstream SELinux• Andro
Page 23 and 24: Ongoing and Future Work• Enable a

SELinux in Android Lollipop and M

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?