Daniel Micay
Daniel Micay
For any partial filtering, we'd have to treat Network as disabled overall and special case certain checks which should be considered enabled so that indirect connections via APIs like DownloadManager...
Does it work on the stock OS?
It's supported already to an extent.
@epoberezkin We're not blocking dynamically loading code in general but rather dynamically loading code that's not shipped with the APK to block it being used as part of exploitation. Apps...
It's also possible to ship native executables in the APK as legacy style libraries which the package manager will extract and label as apk_data_file (not writable by the app) like...
All of this is handled via SELinux for native code. It's proper enforcement of not being able to add new native code dynamically through the execute / execute_no_trans permissions. Android...
@rulnick You can just keep DCL enabled for now. It weakens the protection of the app against exploits to not have ti blocked, such as an attacker getting write access...
Was this SIM working before?
It's working again in your GrapheneOS Pixel 8?
Could it be an issue with the SIM card? It's hard to see how it could be an OS issue.