3 ms·

Note that they will eventually tighten SELinux policy to forbid exec() outside of userspace of the process https://github.com/termux/termux-app/issues/1072#iss

by cft 6y ago

Note that they will eventually tighten SELinux policy to forbid exec() outside of userspace of the process https://github.com/termux/termux-app/issues/1072#issuecomment-474564702 https://github.com/termux/termux-app/issues/1072#issuecommen... So the app will not work on the OS level

zozbot234 6y ago
One will always be able to gain write access to that "user space" by having a separate app build "APK update" packages on-demand, signed by a user-controlled signature. It will be the moral equivalent of running a Linux live distribution from read-only media and having to reboot Termux for each "update". Of course, one will be able to execute other code via JIT, perhaps even hooking into a patched version of qemu-user. It will be annoying but it will broadly work.