As I posted in a previous discussion of this two years ago [1]: The very first comment below the article (correctly) contradicts the author's claims about SELI

As I posted in a previous discussion of this two years ago [1]: The very first comment below the article (correctly) contradicts the author's claims about SELINUX sandbox. The author acknowledges the comment, and criticizes the SELINUX implementation, but does not dispute the fact that SELINUX sandbox ("sandbox -X xterm" in RHEL/CentOS/Fedora/SL) does in fact defeat the keystroke logger attack described in the article. [1] https://news.ycombinator.com/item?id=7607082 https://news.ycombinator.com/item?id=7607082