On 11/1/18 5:08 PM, Cătălin George Feștilă wrote:
SELinux can block the exploit if the "unconfined" module is disabled.
Same thoughts here. No main process (by user) should be allowed to overwrite system
configuration except the dedicated tools or an editor.
I'm writing blog about it. When it will be ready, I add link also
to
this thread.
Thanks. Please let us know about your work.
Regards, Raphael