On 11/2/18 7:01 AM, Raphael Groner wrote:
> On 11/1/18 5:08 PM, Cătălin George Feștilă wrote:
>
> SELinux can block the exploit if the "unconfined" module is disabled.
Same thoughts here. No main process (by user) should be allowed to overwrite system
configuration except the dedicated tools or an editor.
> I'm writing blog about it. When it will be ready, I add link also to
> this thread.
Thanks. Please let us know about your work.
https://lukas-vrabec.com/index.php/2018/11/02/cve-2018-14665-xorg-x-serve...
Regards, Raphael
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
--
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.