News for hackers. Stuff that matters.

A comment on SELinux is unmanageable; just turn it off if it gets in your way. Parent comment

Re:SELinux is unmanageable; just turn it off if it gets in y... by bonzini on Wednesday April 27, 2022 @01:41PM (#31183232)
A lot the container breakout CVEs do not affect a system that uses SELinux properly.
[ Parent | on HN ]
Re:SELinux is unmanageable; just turn it off if it gets in y... by raesene9 on Thursday April 28, 2022 @03:21AM (#31189648)
have you seen an analysis of SELinux against the recent set of breakouts? That'd be interesting to see.

Definitely the CRI-O one (which is most likely to affect Red Hat based systems) was able to exploit a default OpenShift cluster in my testing.

[ Parent | on HN ]