diff options
Diffstat (limited to 'static/features.html')
| -rw-r--r-- | static/features.html | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/static/features.html b/static/features.html index a438174a..cd25c9f4 100644 --- a/static/features.html +++ b/static/features.html @@ -167,10 +167,16 @@ app</li> <li><a href="/usage#exec-spawning">Secure application spawning system</a> avoiding sharing address space layout and other secrets across applications</li> - <li>Network permission toggle disallowing both direct and indirect network access, - superior to a purely firewall-based implementation only disallowing direct - access to the network without covering inter-process communication (enabled by - default for compatibility)</li> + <li>Network permission toggle for disallowing both direct and indirect access + to any of the available networks. The device-local network (localhost) is also + guarded by this permission, which is important for preventing apps from using + it to communicate between profiles. Unlike a firewall-based implementation, + the Network permission toggle prevents apps from using the network via APIs + provided by the OS or other apps in the same profile as long as they're marked + appropriately.</li> + <li>The standard INTERNET permission used as the basis for the Network + permission toggle is enhanced with a second layer of enforcement and proper + support for granting/revoking it on a per-profile basis.</li> <li>Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (enabled by default for compatibility)</li> <li>Authenticated encryption for network time updates via a first party server to |