Analysis and Exploitation of a Linux Kernel Vulnerability

Re:Analysis and Exploitation of a Linux Kernel Vulnerability by tkinom on Tuesday January 19, 2016 @12:24PM (#10932169)

Would a properly setup SELinux able to capture a local program that exploit this kind of bug?

Is there any other other of Linux/Mac/Windows/Android dist that have some type of security framework capture this kind of issue?

[ Parent | on HN ]

Re:Analysis and Exploitation of a Linux Kernel Vulnerability by baghira on Tuesday January 19, 2016 @12:30PM (#10932224)

As others said, using a kernel with the Grsecurity patchset would prevent the issue (I believe the configuration of SElinux on Android should be sufficient, but the default config in RHEL7/Fedora is insufficiently strict).

[ Parent | on HN ]

Re:Analysis and Exploitation of a Linux Kernel Vulnerability by superpatosainz on Tuesday January 19, 2016 @12:31PM (#10932237)

Yes.

Well, Android and most RHEL-derivated distros use SELinux and it can mitigate this kind of problems (assuming it is well configured) and Ubuntu has "AppArmor" but I don't know if it mitigates this issue as well.

[ Parent | on HN ]