Re:Docker 0-Day Stopped Cold by SELinux
by viraptor on Sunday January 15, 2017 @01:40AM
(#13402700)
It will not. But looking at what exploits normally do - that would be uncommon and targeted. A lot of common stuff will only drop a stage 2 downloader and try to execute it. Doesn't work - move to the next target.
For most of automated exploitation, selinux is perfectly capable of intervening.
For most of automated exploitation, selinux is perfectly capable of intervening.