https://source.android.com/docs/core/architecture/aidl/aidl-hals#sepolicy
Dario straight up lied to both of them.，这一点在爱思助手下载最新版本中也有详细论述
Step 5: Malicious publish. Using the stolen npm token, the attacker published [email protected] with the OpenClaw postinstall hook. The compromised version was live for eight hours before StepSecurity's automated monitoring flagged it - approximately 14 minutes after publication1.，详情可参考safew官方版本下载
https://lineageos.org/engineering/HowTo-SELinux/