Root SEAndroid

[9to5cynic]

Don't know if anyone heard about this, I guess it's like an implementation of SELinux for Android, supposedly developed by the NSA lol.

It is supposed to prevent a lot of things, including privilege escalation. It also adds greater sandboxing of applications and prevents high level daemons from being using incorrectly.

Here are some links for you to look at if at all interested.

Security Enhanced (SE) Android Released by National Security Agency (NSA) | The Hacker News (THN)

​

SEAndroid - SELinux Wiki

It says that it should run on anything that can run AOSP, so that's nice.
Thinking about getting into some development now

 

[ocnbrze]

thanx, interesting read. that would be very sweet to get that incorporated into all roms.

 

[9to5cynic]

Yeah that's what I was thinking... though, if it was implemented before rooting, I wonder if it would prevent the root method (privilege escalation...?)...

It'll be interesting to see if anything actually comes out of it....

 

[mikekelso421]

I don't really understand the whole point if this. Can anyone break it down for me.lol it seems to me like its some kind of AntiVirus malware protection. But I just don't quite get the point of it.

 

[9to5cynic]

Well, it implements security enhancements to the Android platform in a similar way that SELinux does for linux. It is meant to limit what privileged daemons can do, and does some sandboxing.

 

[argedion]

If this is something that is going to get implemented then you should read as much about it as possible. I have SELinux on my System and I'm still learning how to use it. Trying to setup a network with it enabled is fun. Getting your shared folders to play nice. I've done it a couple of times now so I'm getting more of the hang of it.

I wouldn't have an issue with it as long as I would be able to use it to my advantage and not to some companies advantage. To be able to tighten security on some of the programs that try to access things I really don't understand why they need. (even maybe kill the ad push )