Skip to content(if available)orjump to list(if available)

SELinux bypasses

SELinux bypasses

2 comments

·October 25, 2024

wannacboatmovie

The problem with SELinux is it's very fragile and basically broken outside RedHat distros.

As an experiment I installed SELinux on Debian and while I was eventually able to get it stable and working after a lot of trial and error, a disk swap broke it irreparably. Yes I rescanned the disk or whatever to have SEL relearn the objects, didn't work. The box was basically unbootable or it would boot and rejected all logins, including root directly to the console, something that should nearly never happen. After hours of troubleshooting the only thing that worked was switching it off and saying good riddance.

rwmj

I'm a bit confused by this article. If you have a way to write arbitrarily into kernel structures can't you pretty much do anything already?