3 ms·
It's worth noting that Android is using SELinux in recent versions for system hardening and as part of the sandboxing model. See: https://source.android.com/se
by tjohns 10y ago
It's worth noting that Android is using SELinux in recent versions for system hardening and as part of the sandboxing model.
See: https://source.android.com/security/selinux/ https://source.android.com/security/selinux/
While I agree usability is suboptimal on servers, there are definitely environments it can excel in.
- notatoad 10y agoI don't think android is really a special case, SELinux is still hard. The only thing that makes android special is that google engineers have put in a lot of work to make SELinux work. It's a powerful tool, but if you want the benefits of SELinux it takes significant effort somewhere in the development chain.
- mtgx 10y agoI think Android is more of a special-case scenario as Google controls everything and it can just tell developers to conform with the more restricted environment in the new version of Android. For Android it also doesn't matter whether SELinux takes a lot of time to set-up right.
- SEJeff 10y agoPreventing many 0day or canned exploits isn't exactly suboptimal. It just requires better or more educated sysadmins.