selinux is enabled by default on Android (since 5.0 or so) and if I recall correctly, is required for google to certify an Android device. IMO it definitely re

selinux is enabled by default on Android (since 5.0 or so) and if I recall correctly, is required for google to certify an Android device. IMO it definitely reduces privilege escalation attacks there. I wonder if Apple uses similar MAC system on iOS? Also, it is usually transparent for user app developers but can cause a bit of headache for platform/system devs. I just literally spent a day on an issue where android system service checks selinux permission but does not audit the denial (= no error in logs) under certain conditions. That was not a problem with selinux per se, but disabling selinux would "solve" the problem.