Kernel vulnerability

Rahul sundaram at fedoraproject.org
Sun Jul 16 07:27:49 UTC 2006


Enrico Scholz wrote:
> benjy.grogan at gmail.com ("Benjy Grogan") writes:
> 
>>> BTW SELinux can stop this attack →
>>> http://www.redhat.com/archives/fedora-selinux-list/2006-July/msg00071.html
>> Wow.  That's great to know.  There should be a list of every security
>> vulnerability that SELinux has stopped or limited.
> 
> Perhaps the other security models should be added to this list too. You
> can start with Linux VServers where this attack does not work either.
> 

For Fedora, SELinux is far more relevant since it is enabled by default 
and does not require kernel patches like Vserver which the Fedora kernel 
wont carry.

Rahul




More information about the fedora-devel-list mailing list