SELinux makes kernel vulnerable

[uteck]

I just saw this story that discusses a security hole in 2.6.30 kernels that run SELinux. Apparently the compiler makes a null pointer that can be exploited only if SELinux or PulseAudio is installed.

http://www.theregister.co.uk/2009/07/17/linux_kernel_exploit/

PulseAudio should have some patches available now, so up date it.

[fos]

Thanks for the heads up! I usually use selinux. I'm not using it currently on this server.

fos