Linux 2.6.30 exploit posted

Don't forget (as noted in the exploit) that on
machines with SELinux, due to a ridiculously
embarrassing vulnerability where both the LSM
framework and default SELinux policies are at
fault, anyone can mmap at NULL regardless of the
mmap_min_addr setting, without needing
pulseaudio or any other suid app. Just look at the
exploit.

BTW, the fact that vendor-sec had a week to
watch a video where I say I mmap at NULL on a
machine with SELinux without using pulseaudio,
and none of them thought to write a program
consisting of one line to test it...is both incredibly
sad and hilarious.

And that SELinux vulnerability surely goes back a
long time (how far exactly I haven't bothered to
check).

-Brad