4 ms·

Would a properly setup SELinux able to capture a local program that exploit this kind of bug? Is there any other other of Linux/Mac/Windows/Android dist that h

by tkinom 11y ago

Would a properly setup SELinux able to capture a local program that exploit this kind of bug? Is there any other other of Linux/Mac/Windows/Android dist that have some type of security framework capture this kind of issue?

baghira 11y ago
As others said, using a kernel with the Grsecurity patchset would prevent the issue (I believe the configuration of SElinux on Android should be sufficient, but the default config in RHEL7/Fedora is insufficiently strict).
superpatosainz 11y ago
Yes. Well, Android and most RHEL-derivated distros use SELinux and it can mitigate this kind of problems (assuming it is well configured) and Ubuntu has "AppArmor" but I don't know if it mitigates this issue as well.