[SecList]Blog: Android 4.3 and SELinux

[igor51]

Blog: Android 4.3 and SELinux

Not many weeks ago Google released a new revision of its flagship mobile operating system, Android 4.3. Although some say that this time updates have been quite scarce, from a security perspective there have been some undeniable improvements (among others, the "MasterKey" vulnerability has been finally patched). One of the most prominent is SELinux. Many cheered the event as a long-awaited move, while others criticized its implementation. Personally, I think that the impact is not that easy to assess, especially if we were to question the benefits for end-users. In order to shed some light we can't help but analyze a bit more what SELinux is, and what is its threat model.
Source: Blog: Android 4.3 and SELinux

[ichigo11]

Salut !

Le titre est prometteur, mais quand on regarde l'article :

Awesome, right? Unfortunately, reality is still quite far from that. The SELinux implementation that is currently deployed on stock Android 4.3 images is missing several important features. First off, SELinux is configured in Permissive mode only, meaning that policies are not enforced, and violations are just being logged (not that useful but for testing).

Pas sûr que ça soit très utile pour le coup ... Parce qu'à part loguer les violations pour l'instant, ça ne sert pas à grand chose d'autre.

[igor51]

Comme sur PC, il a fallut un certain temps pour que SELinux soit mis en enforcing et même aujourd'hui, il ne l'est pas "directement".

L'initiative est bonne s'il y a un vrai retour dessus et que des politiques "intelligentes" sont faites pour Android.