News for hackers. Stuff that matters.

A comment on Docker 0-Day Stopped Cold by SELinux. Parent comment

Re:Docker 0-Day Stopped Cold by SELinux by slrz on Saturday January 14, 2017 @12:41PM (#13399501)
If their "reset password" implementation took care to not mess up the MAC labels on edited files, disabling SELinux wouldn't be necessary.

See virt-rescue(1) (and libguestfs-tools in general) for how to do it properly.

[ Parent | on HN ]

There are no comments on this comment yet.