Enrico Scholz wrote:
benjy.grogan(a)gmail.com ("Benjy Grogan") writes:
>> BTW SELinux can stop this attack →
>>
http://www.redhat.com/archives/fedora-selinux-list/2006-July/msg00071.html
> Wow. That's great to know. There should be a list of every security
> vulnerability that SELinux has stopped or limited.
Perhaps the other security models should be added to this list too. You
can start with Linux VServers where this attack does not work either.
For Fedora, SELinux is far more relevant since it is enabled by default
and does not require kernel patches like Vserver which the Fedora kernel
wont carry.
Rahul