security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

expand Network permission toggle information

Browse Source
This commit is contained in:
Daniel Micay 2021-04-25 13:52:20 -04:00
parent d9670b0e17
commit 15f63e739f
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
static/features.html
View File

@ -167,10 +167,16 @@
app</li> app</li>
<li><a href="/usage#exec-spawning">Secure application spawning system</a> avoiding <li><a href="/usage#exec-spawning">Secure application spawning system</a> avoiding
sharing address space layout and other secrets across applications</li> sharing address space layout and other secrets across applications</li>
<li>Network permission toggle disallowing both direct and indirect network access, <li>Network permission toggle for disallowing both direct and indirect access
superior to a purely firewall-based implementation only disallowing direct to any of the available networks. The device-local network (localhost) is also
access to the network without covering inter-process communication (enabled by guarded by this permission, which is important for preventing apps from using
default for compatibility)</li> it to communicate between profiles. Unlike a firewall-based implementation,
the Network permission toggle prevents apps from using the network via APIs
provided by the OS or other apps in the same profile as long as they're marked
appropriately.</li>
<li>The standard INTERNET permission used as the basis for the Network
permission toggle is enhanced with a second layer of enforcement and proper
support for granting/revoking it on a per-profile basis.</li>
<li>Sensors permission toggle: disallow access to all other sensors not covered by <li>Sensors permission toggle: disallow access to all other sensors not covered by
existing Android permissions (enabled by default for compatibility)</li> existing Android permissions (enabled by default for compatibility)</li>
<li>Authenticated encryption for network time updates via a first party server to <li>Authenticated encryption for network time updates via a first party server to