this post was submitted on 29 Dec 2023
848 points (97.0% liked)

linuxmemes

20688 readers
1309 users here now

I use Arch btw

Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
poopsmith@lemmy.world
zephyr@lemmy.world
848
Your ads dont work here, brand! (lemmy.world)
submitted 8 months ago by Pharmacokinetics@lemmy.world to c/linuxmemes@lemmy.world
126 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] rush@lemm.ee 2 points 8 months ago* (last edited 8 months ago) (1 children)

I know.

Not only have I written about this before on related forums, but also have I talked and partially written about the AVBRoot Project and others which bring root access closer to the Android security model.

[โ€“] Dehydrated@lemmy.world 1 points 8 months ago

Your project sounds great, but it only addresses one part of the issue. But verified boot is far from the only security concept broken by root. Android uses the principal of least privilege (which makes a lot of sense, it's actually used by a lot software). With root, a user-installed app runs with higher privileges than most parts of the entire operating system.