Yes. I also got a lot of questions how SELinux helps us with this exploit. I believe SELinux helps as much as possible here how Dan wrote in his blog.
On 25 September 2014 22:40, Daniel J Walsh <dwalsh@redhat.com> wrote:
https://danwalsh.livejournal.com/71122.html
Good article Dan ... it says clearly what I've been trying to drum into people's heads about the role it takes and how it confines the activity but an exploit that stays within the confines of that activity ... well it has to be allowed or else the standard activity would fail ;)