Je confirme la config par défaut de SELinux empêche l'exploit de fonctionner.
Résumé
SELinux is preventing exploit (unconfined_t) "mmap_zero" to (unconfined_t).
Description détaillée
SELinux denied access requested by exploit. The current boolean settings do not allow this access. If you have not setup exploit to require this access this may signal an intrusion attempt. If you do intend this access you need to change the booleans on this system to allow the access.
Autoriser l'accès
Confined processes can be configured to to run requiring different access, SELinux provides booleans to allow you to turn on/off access as needed. The boolean allow_unconfined_mmap_low is set incorrectly.
Boolean Description:
Allow unconfined domain to map low memory in the kernel
[^] # Re: Fedora 11 x86_64
Posté par Julien Humbert . En réponse au journal Encore un trou de sécurité, encore Brad qui s'amuse.... Évalué à 1.
Résumé
SELinux is preventing exploit (unconfined_t) "mmap_zero" to (unconfined_t).
Description détaillée
SELinux denied access requested by exploit. The current boolean settings do not allow this access. If you have not setup exploit to require this access this may signal an intrusion attempt. If you do intend this access you need to change the booleans on this system to allow the access.
Autoriser l'accès
Confined processes can be configured to to run requiring different access, SELinux provides booleans to allow you to turn on/off access as needed. The boolean allow_unconfined_mmap_low is set incorrectly.
Boolean Description:
Allow unconfined domain to map low memory in the kernel