Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Exploring SE for Android
  • Table Of Contents Toc
Exploring SE for Android

Exploring SE for Android

By : Confer, Roberts
4 (3)
Buy this Book
close
close
Exploring SE for Android

Exploring SE for Android

4 (3)
By: Confer, Roberts
Buy this Book

Overview of this book

This book is intended for developers and engineers with some familiarity of operating system concepts as implemented by Linux. A basic background in C code would be helpful. Their positions range from hobbyists wanting to secure their Android powered creations to OEM engineers building handsets to engineers of emerging areas where Android is seeing growth.
Table of Contents (16 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Linux Access Controls
Icon
1. Linux Access Controls
Icon
Changing permission bits
Icon
Changing owners and groups
Icon
The case for more
Icon
Capabilities model
Icon
Android's use of DAC
Icon
Glancing at Android vulnerabilities
Icon
Summary
2
2. Mandatory Access Controls and SELinux
Icon
2. Mandatory Access Controls and SELinux
Icon
Getting back to the basics
Icon
Labels
Icon
Access vectors
Icon
Multilevel security
Icon
Putting it together
Icon
Complexities and best practices
Icon
Summary
3
3. Android Is Weird
Icon
3. Android Is Weird
Icon
Android's security model
Icon
Binder
Icon
Zygote – application spawn
Icon
The property service
Icon
Summary
4
4. Installation on the UDOO
Icon
4. Installation on the UDOO
Icon
Retrieving the source
Icon
Flashing image on an SD card
Icon
UDOO serial and Android Debug Bridge
Icon
Flipping the switch
Icon
It's alive
Icon
Summary
5
5. Booting the System
Icon
5. Booting the System
Icon
Policy load
Icon
Fixing the policy version
Icon
Summary
6
6. Exploring SELinuxFS
Icon
6. Exploring SELinuxFS
Icon
Locating the filesystem
Icon
Interrogating the filesystem
Icon
Java SELinux API
Icon
Summary
7
7. Utilizing Audit Logs
chevron up
Icon
7. Utilizing Audit Logs
Icon
Upgrades – patches galore
Icon
The audit system
Icon
Interpreting SELinux denial logs
Icon
Contexts
Icon
Summary
8
8. Applying Contexts to Files
Icon
8. Applying Contexts to Files
Icon
Labeling filesystems
Icon
Examples and tools
Icon
A side note on security
Icon
Summary
9
9. Adding Services to Domains
Icon
9. Adding Services to Domains
Icon
Init – the king of daemons
Icon
Dynamic domain transitions
Icon
Explicit contexts via seclabel
Icon
Relabeling processes
Icon
Limitations on app labeling
Icon
Summary
10
10. Placing Applications in Domains
Icon
10. Placing Applications in Domains
Icon
The case to secure the zygote
Icon
Fortifying the zygote
Icon
Summary
11
11. Labeling Properties
Icon
11. Labeling Properties
Icon
Labeling via property_contexts
Icon
Permissions on properties
Icon
Relabeling existing properties
Icon
Creating and labeling new properties
Icon
Special properties
Icon
Summary
12
12. Mastering the Tool Chain
Icon
12. Mastering the Tool Chain
Icon
Building subcomponents – targets and projects
Icon
Exploring sepolicy's Android.mk
Icon
Standalone tools
Icon
Summary
13
13. Getting to Enforcing Mode
Icon
13. Getting to Enforcing Mode
Icon
Updating to SEPolicy master
Icon
Purging the device
Icon
Setting up CTS
Icon
Running CTS
Icon
Gathering the results
Icon
Authoring device policy
Icon
Second policy pass
Icon
Field trials
Icon
Going enforcing
Icon
Summary
14
A. The Development Environment
Icon
A. The Development Environment
Icon
VirtualBox
Icon
Ubuntu Linux 12.04 (precise pangolin)
Icon
VirtualBox extension pack and guest additions
Icon
Save time with shared folders
Icon
The build environment
Icon
Oracle Java 6
Icon
Summary
15
Index
Icon
Index

Chapter 7. Utilizing Audit Logs

So far we've seen AVC records or the SELinux denial messages show up in dmesg, but dmesg is a circular memory buffer, subject to frequent rollover dependent on how verbose your kernel is. By using the audit kernel subsystem, we can route these messages into user space and log them to disk. On the desktop, the daemon that does this is called auditd. A minimal port of auditd is maintained in the NSA branches however, it has not officially been merged into AOSP. We are going to use the auditd version from the NSA branches since we are working on Android 4.3. The officially merged version as of April 7, 2014 can be found at https://android-review.googlesource.com/#/c/89645/. It's implemented within logd, and merged at https://android-review.googlesource.com/#/c/83526/.

In this chapter, we will:

  • Update our system with the fast-paced SE for Android Open Source Community (AOSP)
  • Investigate how the audit subsystem works
  • Learn to read SELinux audit...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Exploring SE for Android
End of Section 7
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon