Android Permission Security SELinux

Android Security Architecture

ROM

Posted by LXG on November 15, 2018

Android Security Architecture

AOSP安全指南

官网应用安全最佳实践

源码权限定义

官网权限定义

源码UID定义

应用程序沙箱

进程级

root      1     0     14388  2384  SyS_epoll_ 00004c9810 S /init
root      715   1     2161460 83980 poll_sched 7f8eeb4898 S zygote64
root      716   1     1592656 70568 poll_sched 00e96b8594 S zygote
system    1385  715   2371452 134876 SyS_epoll_ 7f8eeb4778 S system_server
root      377   1     49176  4008  hrtimer_na 7fa6d901b0 S /system/bin/vold
radio     2532  715   1586980 50552 SyS_epoll_ 7f8eeb4778 S com.android.phone
media     727   1     44112  7672  binder_thr 00ea4874ec S /system/bin/mediaserver
u0_a41    2286  715   1659016 83256 SyS_epoll_ 7f8eeb4778 S com.android.launcher3

文件级

drwxrwx--x  2 root sdcard_rw     4096 2018-11-14 15:16 Download
drwx------   4 system    system    4096 1970-09-08 08:32 android
drwx------   4 u0_a27    u0_a27    4096 1970-09-08 08:32 com.android.systemui

权限

SELinux

selinux-AOSP

编译生成文件: out/target/product/msm8937_32/obj/ETC/sepolicy_intermediates/policy.conf

11-06 17:06:27.241 1336 1336 I auditd : type=1400 audit(0.0:323): avc: denied { search } for comm=”ActivityManager” name=”media” dev=”dm-0” ino=472354 scontext=u:r:system_server:s0 tcontext=u:object_r:sunmi_media_file:s0 tclass=dir permissive=0

03-27 21:00:44.117 6397 6397 W m.sunmi.sidekey: type=1400 audit(0.0:72): avc: denied { write } for name=”property_service” dev=”tmpfs” ino=220 scontext=u:r:sunmi_app:s0:c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

CATALOG
    FEATURED TAGS
    Android debug dumpsys shell linux Permission 心理学 ubuntu JNI markdown android IMS systemui selinux eSIM androidstudio performance pms wms view flutter iptables netd property c++ kernel mqtt usb company statusbar docker hardware webrtc recovery web camera rk3288 A133 driver rockchip rk3399 chip rk3588 a133 qt t113 buildroot AI MCU
    FRIENDS