All tags
Posts tagged with "SELinux"
SELinux Multi-SoC Policy Architecture: From Pitfalls to Design Contracts
When an Android platform supports multiple chipsets, the layered design of SELinux policy determines the ceiling of maintenance cost. This post walks through the three-layer protection model, common directory layout traps, and how to govern cross-SoC sepolicy with contracts instead of folders.
SELinux Multi-SoC 策略架構：從踩坑到設計契約
在 Android 平台上支援多個晶片組時，SELinux policy 的分層設計決定了維護成本的上限。這篇文章從實戰踩坑出發，拆解三層保護模型、目錄切法的常見陷阱，以及如何用「契約」而非「資料夾」來治理跨 SoC 的 sepolicy。