selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1218672 | Issue Tracking |
Configurations
Information
Published : 2017-07-21 07:29
Updated : 2017-07-26 13:03
NVD link : CVE-2015-3170
Mitre link : CVE-2015-3170
JSON object : View
CWE
CWE-254
7PK - Security Features
Products Affected
selinux_project
- selinux