4 ms·

So static analysis will not catch private API usage, so is mostly useless for protecting the users, it is interesting that such a rich company could not hire a

So static analysis will not catch private API usage, so is mostly useless for protecting the users, it is interesting that such a rich company could not hire a team of competent developers to produce an actual secure way to give applications(and users) access to the private APIs. Does Linux/BSD sandboxing system offer such protection?

ece 5y ago
Android uses SELinux by default to sandbox apps since v5[1], Linux/BSD have several forms of sandboxing[2], and the most common is probably AppArmor offered by Ubuntu and other distros. A few support SELinux as well. [1] https://source.android.com/security/selinux https://source.android.com/security/selinux [2] https://en.wikipedia.org/wiki/Linux_Security_Modules https://en.wikipedia.org/wiki/Linux_Security_Modules