<div dir="ltr">Thanks for the blog post. Quick question, this affects only when root gives permission to 'usr' to edit<div>files owned by him? </div><div><br></div><div>We rely heavily on SELinux to confine users (guest_u) on our project (<a href="http://www.webminal.org">www.webminal.org</a>) </div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">----<br>Cheers,<br>Lakshmipathi.G<br>FOSS Programmer.<br><a href="http://www.giis.co.in" target="_blank">www.giis.co.in</a></div></div></div></div></div>
<br><div class="gmail_quote">On Wed, Nov 4, 2015 at 4:44 PM, Miroslav Grepl <span dir="ltr"><<a href="mailto:mgrepl@redhat.com" target="_blank">mgrepl@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">We wrote a blog post explaining how SELinux helps you with this sudo CVE.<br>
<br>
<a href="https://mgrepl.wordpress.com/2015/11/04/cve-2015-5602-and-selinux/" rel="noreferrer" target="_blank">https://mgrepl.wordpress.com/2015/11/04/cve-2015-5602-and-selinux/</a><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Miroslav Grepl<br>
Senior Software Engineer, SELinux Solutions<br>
Red Hat, Inc.<br>
--<br>
selinux mailing list<br>
<a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/selinux" rel="noreferrer" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/selinux</a></font></span></blockquote></div><br></div>