https://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2014/Abstracts/Smalley&feed=atom&action=history
Linux Security Summit 2014/Abstracts/Smalley - Revision history
2024-03-28T15:00:05Z
Revision history for this page on the wiki
MediaWiki 1.36.1
https://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2014/Abstracts/Smalley&diff=3505&oldid=prev
JamesMorris at 16:01, 15 July 2014
2014-07-15T16:01:37Z
<p></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:01, 15 July 2014</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l5">Line 5:</td>
<td colspan="2" class="diff-lineno">Line 5:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Presenter ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Presenter ==</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Stephen Smalley</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Stephen Smalley<ins style="font-weight: bold; text-decoration: none;">, NSA</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abstract ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abstract ==</div></td></tr>
</table>
JamesMorris
https://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2014/Abstracts/Smalley&diff=3502&oldid=prev
JamesMorris: New page: == Title == Protecting the Android TCB with SELinux == Presenter == Stephen Smalley == Abstract == At last year's LSS, SELinux was already shipping in the Samsung Galaxy S4 smartphone...
2014-07-15T15:57:51Z
<p>New page: == Title == Protecting the Android TCB with SELinux == Presenter == Stephen Smalley == Abstract == At last year's LSS, SELinux was already shipping in the Samsung Galaxy S4 smartphone...</p>
<p><b>New page</b></p><div>== Title ==<br />
<br />
Protecting the Android TCB with SELinux<br />
<br />
== Presenter ==<br />
<br />
Stephen Smalley<br />
<br />
== Abstract ==<br />
<br />
At last year's LSS, SELinux was already shipping in the Samsung Galaxy<br />
S4 smartphone and included in the official Android 4.3 release by<br />
Google, but was in permissive mode by default. Since last year's LSS,<br />
SELinux has been made enforcing by default in Samsung devices and in<br />
the official Android 4.4 / KitKat release by Google.<br />
<br />
As shipped in Android 4.4, SELinux was focused on protecting a set of<br />
root daemons in Android. This protection was successful in preventing<br />
exploitation of a long-standing root vulnerability in Android. Since<br />
the 4.4 release, significant work has gone into expanding the coverage<br />
of SELinux in Android to fully confine and protect all Android<br />
processes and to protect the Android Trusted Computing Base (TCB)<br />
against a number of practical, real-world threats. In this talk, we<br />
will describe how SELinux is being applied to Android to protect its<br />
TCB. The Android SELinux changes are already visible in the Android<br />
Open Source Project (AOSP) master branch and are expected to be<br />
included in the next major release of Android. We will also explain<br />
how we addressed various practical challenges to using SELinux<br />
effectively and summarize ongoing work to further improve the state of<br />
Android security.</div>
JamesMorris