policycoreutils: insecure temporary directory handling in seunshare

The seunsharemount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux RHEL 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to...

policycoreutils security update

policycoreutils: 2.0.83-19.8 - Fix seunshare to work with /tmp content when SELinux context is not provided Resolves: 679689 2.0.83-19.7 - put back correct chcon - Latest fixes for seunshare 2.0.83-19.6 - Fix rsync command to work if the directory is old. - Fix all tests Resolves: 679689...

Fedora 14 : policycoreutils-2.0.85-19.fc14 (2011-3043)

This fixes the problem with seunshare causing applications to mistakenly use the /tmp directory in an unsafe manner. CVE-2011-1011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2011-1011

CVE-2011-1011 affects the seunshare_mount path in the policycoreutils seunshare sandbox. The vulnerability arises when seunshare mounts a new /tmp directory without root ownership and the sticky bit, allowing a local user to overwrite or delete arbitrary /tmp files and potentially escalate privil...

Red Hat Linux stickiness of /tmp

Exploit for linux platform in category dos / poc Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from...

PT-2011-1128 · Red Hat · Selinux-Policy-Minimum +11

Name of the Vulnerable Software and Affected Versions: policycoreutils versions 2.0.83 and earlier policycoreutils-sandbox version 2.0.83 policycoreutils-python version 2.0.83 policycoreutils-debuginfo version 2.0.83 policycoreutils-newrole version 2.0.83 policycoreutils-gui version 2.0.83...

RedHat Linux - Stickiness of /tmp

from: http://marc.info/?l=full-disclosure&m=129842239022495&w=2 Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utili...

Red Hat Enterprise Linux seunshare Unsafe Implementation

Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from policycore-utils intended to make new filesystem...