Questions tagged [selinux]

Security-Enhanced Linux is a Linux optional feature ("kernel module") that provides mechanisms for protecting parts of the operating system via "mandatory access controls", aka MACs. It was created by Red Hat and the US National Security Agency, and first released in December 2000.

It is a standard part of Android (since version 4.3) which makes sense given that a mobile phone used by a member of the public is a rather threatening security environment, compared to the 1970s computers with skilled system administrators where the basic UNIX security system was developed.

More details: https://source.android.com/security/selinux/

100 questions
13
votes
5 answers

Examine android (v30) selinux policy

I'm trying to find what policy is actually enforced by my phone using selinux. You'd think this would be easy. After all, for security it is good to verify that your policy matches expectations. Unfortunately, I've found this shockingly hard to…
user3188445
  • 271
  • 1
  • 2
  • 7
4
votes
1 answer

What is SELinux and its purpose?

For those of you who don't know, SELinux is a collection of administrative tools on Linux OS'. However, what is it for on android, and what does it do on android? After all, Android is not Linux. SELinux contributes to part of the Android OS. Its…
Dan Brown
  • 1,731
  • 1
  • 16
  • 39
1
vote
0 answers

How to make `/system` dir files readable using `sepolicy-inject` tool?

In enforcing SELinux state, Android /system files become unavailable to read in explorer. How to make /system dir files readable using sepolicy-inject tool? Also, need sepolicy-inject command for setting read-write permission to a single file in the…