5 ms·
IIRC, Linux-based Android did that from day 1. Every app runs as different "user" from the kernel perspective. Plus, you have various [LSM]s as a safety net. A
by nousermane 5y ago
IIRC, Linux-based Android did that from day 1. Every app runs as different "user" from the kernel perspective.
Plus, you have various [LSM]s as a safety net. Android was an early adopter of SELinux, and latest releases still use it.
[LSM] https://en.wikipedia.org/wiki/Linux_Security_Modules https://en.wikipedia.org/wiki/Linux_Security_Modules
- adib 5y agoExcept that Android apps tend to ask for just about all entitlements available. Translation: effectively back to square 1.
- deleted 5y ago[deleted]
- qwerty456127 5y agoYes, this is a huge problem. I wish Google would enforce zero-tolerance policy against apps misusing this mechanism and asking for permissions they don't really need for fulfilling their actual function.
- deleted 5y ago[deleted]
- roblabla 5y agoFuchsia's capabilities mechanism are strictly superior. There has been, over various android version, many fixes to "leaks" of information due to the SELinux configuration not being comprehensive enough, and linux being default open when it comes to capabilities. In contrast, Fuchsia is default closed, so if you don't ask for the permission to do something, you can't. I distinctly remember ad companies using various tricks like reading /proc and the like to try and get information about what applications are running on a phone and what servers they are communicating with without asking for perms (it's fixed now, but it used to be a thing years ago). This is the kind of stuff that fuchsia should, in theory, prevent.
- deleted 5y ago[deleted]
- snvzz 5y agoCapabilities are not what you think they are. Refer to Genode Handbook for a decent definition and examples. seL4 is formally proven to enforce capabilities.
- qwerty456127 5y agoWhat OSes other than Fuchsia are built on seL4? I'd like to try such an OS on a PC, or a Raspberry Pi or in a VM.
- snvzz 5y agoFuchsia is not built on seL4. Genode is, and should be reasonably easy to test on a regular PC, via bootable usb stick. It can be quite confusing to use at first, as capabilities have GUI representation. There's a blog[0] and some introductory video[1]. [0]: https://genodians.org/ https://genodians.org/ [1]: https://youtu.be/vmgWgzeKAjU https://youtu.be/vmgWgzeKAjU