Based off linux uses linux Commands Permisiions based of linuix

Android runtime - modern translation layer from byte code into device instructions Every app has its own sandboxed virtual machine


system apps are isolated

Each app has its own user for the app

The apps dont interact with each other unless explicitly instructed or Content provider/Broadcast receiver is exposed

Root user can access all app folders


Profiles - Separate app data


Architecture

https://mobile-security.gitbook.io/mobile-security-testing-guide/android-testing-guide/0x05a-platform-overview

https://source.android.com/security/overview/app-security