SELint: an SEAndroid policy analysis tool

Elena Reshetova; Filippo Bonazzi; N Asokan

SELint: an SEAndroid policy analysis tool

Elena Reshetova, Filippo Bonazzi, N Asokan

Research output: Working paper › Professional

Abstract

SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

Original language	English
Place of Publication	arXiv
Number of pages	13
Publication status	Published - 8 Aug 2016
MoE publication type	D4 Published development or research report or study

Publication series

Name	arXiv preprints

Access to Document

https://arxiv.org/abs/1608.02339

1 Conference article in proceedings

Characterizing SEAndroid policies in the wild
Reshetova, E., Bonazzi, F., Nyman, T., Borgaonkar, R. & Asokan, N., 2016, ICISSP 2016 - Proceedings of the 2nd International Conference on Information Systems Security and Privacy. SciTePress, p. 482-489 8 p.
Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review
3 Citations (Scopus)

Cite this

@techreport{57141581de4e4b9e86ff13fcc243d342,

title = "SELint: an SEAndroid policy analysis tool",

abstract = "SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.",

author = "Elena Reshetova and Filippo Bonazzi and N Asokan",

year = "2016",

month = aug,

day = "8",

language = "English",

series = "arXiv preprints",

type = "WorkingPaper",

}

TY - UNPB

T1 - SELint: an SEAndroid policy analysis tool

AU - Reshetova, Elena

AU - Bonazzi, Filippo

AU - Asokan, N

PY - 2016/8/8

Y1 - 2016/8/8

N2 - SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

AB - SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

M3 - Working paper

T3 - arXiv preprints

BT - SELint: an SEAndroid policy analysis tool

CY - arXiv

ER -

SELint: an SEAndroid policy analysis tool

Abstract

Publication series

Access to Document

Fingerprint

Research output

Characterizing SEAndroid policies in the wild

Cite this