> From: owner-selinux@xxxxxxxxxxxxx [owner-selinux@xxxxxxxxxxxxx] on behalf of Stephen Smalley [sds@xxxxxxxxxxxxx]
> Sent: Friday, March 16, 2012 6:22 AM
> To: lkcl luke
> Cc: selinux@xxxxxxxxxxxxx
> Subject: Re: B2G
>
> <snip>
>
> Who provides the policy? For a mobile device, you typically don't trust
> the application package (contrast with Linux packages) and thus do not
> want to simply take policy provided by the packager for that app.
>
> --
> Stephen Smalley
> National Security Agency
Hi Stephen
I see two options to trust a downloaded policy: when it is
downloaded from a Device Administrator application, or as part
of a system update.
Enjoy!
-- radzy
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
