News for hackers. Stuff that matters.
Re:Docker 0-Day Stopped Cold by SELinux by lisivka on Saturday January 14, 2017 @11:36PM (#13402344)
I'm not saying that risk is not reduced. I'm saying SELinux is not effective, so it's better to spent my time/money on something that can reduce risk significantly.

I saw no 0-day exploits to date which are stopped by SELinux. For example, a trojan can use apache process as malware host, without reading/writing to disk at all. SELinux will not stop that even in theory.

Re:Docker 0-Day Stopped Cold by SELinux by viraptor on Sunday January 15, 2017 @01:40AM (#13402700)
It will not. But looking at what exploits normally do - that would be uncommon and targeted. A lot of common stuff will only drop a stage 2 downloader and try to execute it. Doesn't work - move to the next target.

For most of automated exploitation, selinux is perfectly capable of intervening.