• What do you know about WX policy in Android?

    From Andrew@21:1/5 to All on Wed Jun 12 05:36:08 2024
    I happened to have installed this app just now & took a look at it in the Muntashirak App Manager, which said it violates Write or Execute policy...
    <https://play.google.com/store/apps/details?id=com.alextern.shortcutexecutors>

    WX <https://i.postimg.cc/pyMxZvkx/wx.jpg>
    The app violates W^X policy and is capable of
    writing and executing in the same directory or
    in the same portion of memory. This allows
    the execution of arbitrary executables either
    by the modification of executables embedded
    within the app or by downloading them from
    the Internet. Unless this is the intended
    behavior of the app (e.g. terminal emulators),
    it is recommended to find a newer version of
    the app that targets SDK 29 (Android 10) and
    later, or find alternatives.

    <https://en.wikipedia.org/wiki/W%5EX>
    W^X ("write xor execute", pronounced W xor X) is a security
    feature in operating systems and virtual machines. It is a
    memory protection policy whereby every page in a process's
    or kernel's address space may be either writable or executable,
    but not both.

    Without such protection, a program can write (as data "W")
    CPU instructions in an area of memory intended for data and
    then run (as executable "X"; or read-execute "RX") those instructions.

    This can be dangerous if the writer of the memory is malicious.
    W^X is the Unix-like terminology for a strict use of the general
    concept of executable space protection, controlled via the
    mprotect system call.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)