Here's the reply from Rafal with the details on the SELinux exploit.

-- 
Wayne Salamon
wsalamon@nailabs.com

---------- Forwarded message ----------
Date: Thu, 5 Jun 2003 09:49:35 -0700
From: Rafal Wojtczuk <rafal@intruvert.com>
To: Wayne Salamon <wsalamon@nailabs.com>
Cc: cvance@nailabs.com
Subject: Re: A vulnerability in SELinux

On Thu, Jun 05, 2003 at 07:20:13AM -0400, Wayne Salamon wrote:


> > I would like to disclose to you a certain, IMHO significant, security

> > vulnerability in SELinux. Pls let me know whether you prefer me to follow up

>   Please forward any info you have to me and Chris Vance. Plain email is

> fine.


The description and the exploit code in the attachments. Eager to hear some
comments :)

Regards,
Rafal Wojtczuk



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



TEXT/PLAIN attachment: description.txt



TEXT/PLAIN attachment: selinux-exploit.c