Is it possible to get around this with user agent spoofing? Or maybe degoogled Chromium?
ryuko
joined 1 year ago
That's a really interesting bypass; I wonder how this can be patched or mitigated considering the module is entirely loaded from memory. Short of setting noexec on temporary directories, I can't think of any quick short term fixes.
Edit: Re-read the blog post and looked at the Github repo for the code- looks like this is more of a proof of concept of a SELinux confine bypass, as the kernel needs to be compiled with CONFIG_SECURITY_SELINUX_DEVELOP set. See the readme here, there's some more notes that weren't included in the blog post.
Mine isn't very interesting, but sure