What do you know about WX policy in Android?

Liste des GroupesRevenir à cm android 
Sujet : What do you know about WX policy in Android?
De : andrew (at) *nospam* spam.net (Andrew)
Groupes : comp.mobile.android
Date : 12. Jun 2024, 07:36:08
Autres entêtes
Organisation : BWH Usenet Archive (https://usenet.blueworldhosting.com)
Message-ID : <v4bc47$2qg1$1@nnrp.usenet.blueworldhosting.com>
User-Agent : PiaoHong.Usenet.Client.Free:1.65
I happened to have installed this app just now & took a look at it in the
Muntashirak App Manager, which said it violates Write or Execute policy...
 <https://play.google.com/store/apps/details?id=com.alextern.shortcutexecutors>

WX <https://i.postimg.cc/pyMxZvkx/wx.jpg>
  The app violates W^X policy and is capable of
  writing and executing in the same directory or
  in the same portion of memory. This allows
  the execution of arbitrary executables either
  by the modification of executables embedded
  within the app or by downloading them from
  the Internet. Unless this is the intended
  behavior of the app (e.g. terminal emulators),
  it is recommended to find a newer version of
  the app that targets SDK 29 (Android 10) and
  later, or find alternatives.

 <https://en.wikipedia.org/wiki/W%5EX>
 W^X ("write xor execute", pronounced W xor X) is a security
 feature in operating systems and virtual machines. It is a
 memory protection policy whereby every page in a process's
 or kernel's address space may be either writable or executable,
 but not both.

 Without such protection, a program can write (as data "W")
 CPU instructions in an area of memory intended for data and
 then run (as executable "X"; or read-execute "RX") those instructions.

 This can be dangerous if the writer of the memory is malicious.
 W^X is the Unix-like terminology for a strict use of the general
 concept of executable space protection, controlled via the
 mprotect system call.

Date Sujet#  Auteur
12 Jun 24 o What do you know about WX policy in Android?1Andrew

Haut de la page

Les messages affichés proviennent d'usenet.

NewsPortal