5 ms·
I am sure SELINUX will block these kind of buffer overruns. Unfortunately most people are disabling SELINUX in their machines.
by sagarun 16y ago
I am sure SELINUX will block these kind of buffer overruns. Unfortunately most people are disabling SELINUX in their machines.
- lutorm 16y agoPerhaps unfortunate, but not entirely unmotivated. SELinux has caused nothing but trouble for me. Things strangely don't work, until you remember to look for audit messages, and the documentation I've seen doesn't make it much less opaque...
- rwmj 16y agoSELinux relies on the kernel being intact. If you do a buffer overrun in the kernel, then SELinux isn't going to help at all.
- viraptor 16y agoThis might change if selinux was better explained / had more easy to use tools. For now, most bigger software packages start with "1. disable selinux 2. run the software 3. ...". If developers can't figure it out properly, how can we expect users to do so... As an example, OO.org doesn't work on centos without manually adjusting / turning off selinux.