How exactly does SELinux mitigate and prevent Copy Fail and Dirty Frag?
From what I gather, these attacks corrupt the page-cache in memory and leave almost zero traces on the actual disk
I also saw a few people mentioning that SELinux is currently one of the only reliable ways to catch or stop these attacks in the wild. But honestly, I don't fully get why or how it does that
Is SELinux just blocking the specific socket stuff before the exploit even triggers?
https://redd.it/1tb1o53
@r_linux
Post #41811
61