Thanks David, I see there was a discussion under "Android sandbox reinforced with SELinux." Would the folks at viaForensics know the details (i.e., in Enforcing mode)? Or will it be up to the OEM and/or carrier (perhaps Permissive or Disabled mode; or perhaps completely removed)?
Jeff On Thu, Aug 1, 2013 at 7:06 PM, David Weinstein <dwei...@insitusec.com> wrote: > (Disclaimer: I'm a vF employee) > > There's some here: > > https://viaforensics.com/mobile-security/android-4-3-thoughts-insights-pof-pau-oliva.html > > And also look out for Pau's Defcon talk which will discuss some real world > issues w/ integration of SE Android into commercial platforms. > > David > > On Aug 1, 2013, at 15:03, Jeffrey Walton <noloa...@gmail.com> wrote: > > Hi All, > > From http://developer.android.com/about/versions/jelly-bean.html: > > Android sandbox reinforced with SELinux > > Android now uses SELinux, a mandatory access control (MAC) > system in the Linux kernel to augment the UID based application > sandbox. This protects the operating system against potential > security vulnerabilities. > > But I've read in other places SELinux is being operated in audit mode, > and provides no policy enforcement. > > Is there any detailed reading on Android 4.3's security enhancements? > > Jeff > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to android-security-discuss+unsubscr...@googlegroups.com. > To post to this group, send email to > android-security-discuss@googlegroups.com. > Visit this group at http://groups.google.com/group/android-security-discuss. > For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-security-discuss+unsubscr...@googlegroups.com. To post to this group, send email to android-security-discuss@googlegroups.com. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/groups/opt_out.
