Earlier quoted context omitted.
> Android 13+ includes a crosvm based virtulization setup Interesting; but I feel that their choice of a hypervisor-based design here supports my point of plain container-based isolation (or even containers + gVisor) being insufficient to achieve true sandboxing on Android. > Android's sandboxing is not limited to ART and has multiple layers [0]. Native apps cannot bypass sandboxing, I don't think. Yes, but when I sa…
It is prevented by killing any process that makes API calls not part of the official set of public NDK APIs and file locations. Which is one of the reasons why Termux has issues on modern Android versions. https://github.com/termux/termux-packages/wiki/Termux-and-An...
This is not something Android does.