Android安全笔记

备注

https://github.com/abbypan/android-security-notes

目录

Model

• Android Platform Security Model

Boot

• Partition
• fastboot
• Secure Boot + AVB
• dm-verity
• AVB unlock
• On Device Signing

Access Control

• SELinux

Encryption

• encryption
• FBE

Authentication

• Authentication
• LockSettings

Keystore

• Keystore
• Remote Key Provision (RKP)
• MTK: Google Attestation Key Tool
• Secure Key Import

Credential

• Identity Credential

APP

• app signing
• apk signature scheme
• App Security

Update

• Mainline modules (apex/apk)
• APEX & APK
• pub key
• pub key owner

TLS

• TLS Verifier

Connectivity

• Nearby Threats

Permission

• 权限管控

Kernel

• GKI

SE

• ready se

DNS

• bionic dns