Why was this only tested against grsec but not SELinux? Is there some reason tha... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

flyinRyan on Nov 20, 2012 | parent | context | favorite | on: Attacking hardened Linux systems with kernel JIT s...

Why was this only tested against grsec but not SELinux? Is there some reason that it's not interesting to test SELinux against this exploit??

jbangert on Nov 20, 2012 [–]

SELinux does not aim to protect or harden the kernel. SELinux aims to enforce a more complicated(maybe expressive), MAC policy on the filesystem and a few related objects. The SELinux threat model is helpless against a kernel vulnerability because it does not address application security.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact