Re: [android-security-discuss] SELinux on Android

2011-06-18 Thread Charles Clancy
On 6/17/2011 3:41 PM, Chris Palmer wrote: The Android kernel binder driver just exposes /dev/binder interface that is readable and writable by all apps -- everything can talk to everything. Yes, but as on the internet, the message recipient can decide whether or not it wants to act on the

Re: [android-security-discuss] SELinux on Android

2011-06-18 Thread Chris Palmer
Also, as on the Internet, it's up to the individual apps to protect themselves, rather than the infrastructure providing systemic safeguards. And they can, and do. But, the easiest way to make sure only authorized callers invoke your IPC endpoints is to declare in your Manifest that all