| |||||||||||||
vmsplice(): the making of a local root exploitvmsplice(): the making of a local root exploitPosted Feb 14, 2008 8:16 UTC (Thu) by dale77 (guest, #1490)Parent article: vmsplice(): the making of a local root exploit
Anyone know whether SELinux would have prevented this exploit?
(Log in to post comments)
vmsplice(): the making of a local root exploit Posted Feb 14, 2008 13:44 UTC (Thu) by corbet (editor, #1) [Link] The exploit is able to run arbitrary code in kernel mode, so the answer has to be "no." Unless one had previously configured SELinux to disallow access to vmsplice() altogether, of course.
One possible SELinux trick Posted Feb 14, 2008 15:06 UTC (Thu) by corbet (editor, #1) [Link] I just ran across this posting from James Morris on how SELinux (in recent kernels) can block the mapping of memory into very low addresses - a feature which would have defeated this particular exploit.
|
|||||||||||||