Home / vulnerabilities Android Calling Getpidcon Gets Wrong Security Context
Posted on 23 February 2016
Source : packetstormsecurity.org Link
The servicemanager, keystore and drmserver all use getpidcon function to get the security context of the caller from a binder. When combined with a one way binder transaction this results in getting the security context of the current process which might allow a selinux mac bypass.
