Upcoming Change: Stricter treatment of unexpected SELinux states.

[SafetyNet API Clients Team]

Hi,

The SafetyNet Attestation API will be switching to harsher enforcement for unexpected SELinux states found on devices. This means that for the affected devices we will begin returning the basicIntegrity field in our response as false. Note that for all these affected devices, we've already been reporting the ctsProfileMatch field as false.

We've already reached out to the OEMs of the devices that will be most affected by this behavior. Some of them have already started rolling out OTA updates to fix their affected devices.
In any case, this change will only affect a relatively small set of devices.

If your end-users contact you after getting affected by this change, please ask them to either restore their devices to a certified (and unaffected) build, or to reach out to their OEM to get an updated build for their device.

Regards,

SafetyNet API Clients Team