http://kernsec.org/wiki/index.php?action=history&feed=atom&title=Linux_Security_Summit_2014%2FAbstracts%2FSmalley 2026-04-20T17:04:45Z Revision history for this page on the wiki MediaWiki 1.36.1 http://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2014/Abstracts/Smalley&diff=3505&oldid=prev 2014-07-15T16:01:37Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:01, 15 July 2014</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l5">Line 5:</td> <td colspan="2" class="diff-lineno">Line 5:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Presenter ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Presenter ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Stephen Smalley</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Stephen Smalley<ins style="font-weight: bold; text-decoration: none;">, NSA</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abstract ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abstract ==</div></td></tr> </table>

JamesMorris http://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2014/Abstracts/Smalley&diff=3502&oldid=prev 2014-07-15T15:57:51Z

<p>New page: == Title == Protecting the Android TCB with SELinux == Presenter == Stephen Smalley == Abstract == At last year&#039;s LSS, SELinux was already shipping in the Samsung Galaxy S4 smartphone...</p> <p><b>New page</b></p><div>== Title ==<br /> <br /> Protecting the Android TCB with SELinux<br /> <br /> == Presenter ==<br /> <br /> Stephen Smalley<br /> <br /> == Abstract ==<br /> <br /> At last year's LSS, SELinux was already shipping in the Samsung Galaxy<br /> S4 smartphone and included in the official Android 4.3 release by<br /> Google, but was in permissive mode by default. Since last year's LSS,<br /> SELinux has been made enforcing by default in Samsung devices and in<br /> the official Android 4.4 / KitKat release by Google.<br /> <br /> As shipped in Android 4.4, SELinux was focused on protecting a set of<br /> root daemons in Android. This protection was successful in preventing<br /> exploitation of a long-standing root vulnerability in Android. Since<br /> the 4.4 release, significant work has gone into expanding the coverage<br /> of SELinux in Android to fully confine and protect all Android<br /> processes and to protect the Android Trusted Computing Base (TCB)<br /> against a number of practical, real-world threats. In this talk, we<br /> will describe how SELinux is being applied to Android to protect its<br /> TCB. The Android SELinux changes are already visible in the Android<br /> Open Source Project (AOSP) master branch and are expected to be<br /> included in the next major release of Android. We will also explain<br /> how we addressed various practical challenges to using SELinux<br /> effectively and summarize ongoing work to further improve the state of<br /> Android security.</div>

JamesMorris